f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = openat$nvram(0xffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x8040, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x14, &(0x7f0000000000)={r4, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r4, 0x401, 0x3, 0x3}, &(0x7f0000000200)=0x10) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e24, 0x81, @private0, 0x9}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000180)=0xb0) [ 280.043602][ T8434] usb 1-1: new high-speed USB device number 10 using dummy_hcd 23:21:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x4, &(0x7f0000000080)=[{&(0x7f00000001c0)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002289a05705fa18e4dab2400647e5c6adc1e884ad9186a00854b0f2f012f40e07752300364a9bd66f9632e00a569ffbbef5967273960825ce115f89beef56de390f4ffb03bb187dc6611ac527c24af453499a5601bd5534e3805fdaf4eb81d81a7666fda375171b8a6bcf16e", 0xc5, 0x400}, {&(0x7f0000010300)="020000000300000004000000c0b80f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x801, 0x1001}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0/../file0\x00', 0x419302, 0x0) pwritev(r2, &(0x7f00000006c0)=[{&(0x7f0000000780)="c3", 0x1}], 0x1, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r5 = msgget$private(0x0, 0x0) msgrcv(r5, 0x0, 0xde, 0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x0, 0x0) msgsnd(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000001958f6d2882897f70acdcc9436e486caee91e702b01fd10614e877ffb5d702209dadcbd91b8f1b7eb3977bde5872488a60d00b4aedbd52bd1b7181256df13183b8c06b68505c7d3e4ac62b030687d91ebb7dc8960fc37a71da73e7480f2c3a9a24f2b8286283b934c47a398d92fe5d4b9a537e6f167b2dc9eda0740b6abf09eebdf90a14dbeeadaa7e3cca5c3684f96e6cbcc7917cd5ebcff01bc4b137975bd3d97edacdb77f32eaa200ec85f96acbe45a278beab07b8cc8b2b75e2dc81d741510077afd8f1255df5d75fcc3b2127891695bb329c6ecdf"], 0xdf, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x85, 0x0, 0x400, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe4) fchown(r6, r7, 0x0) lstat(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000001200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) msgctl$IPC_SET(r5, 0x1, &(0x7f0000003240)={{0x0, 0xffffffffffffffff, 0x0, r7, r8, 0x102, 0xffff}, 0x0, 0x0, 0x1, 0x2, 0x0, 0x101, 0x4, 0x1ff, 0x4, 0x8000, r9, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)=[{&(0x7f00000032c0)=ANY=[@ANYBLOB="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"], 0x122c}, {&(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="08000400ffffffffe8005f801d006100e5bac46b706c23ed84c5d1335cde686c4d4573240a3f3b1c500000002f0b69a7f1cca5e2e6015166c840434299641e8159b95949a0ab5c28fb6370df64f690102a5cb1a3fd8b61597a206d83d8f63206dfc4caa62dcf6c758cada3cbb7cb273932f795f3e784a8ceb95b82bd8046fb7702b836c337b0113b876587e92f97131f8b6290c5fd728f4160e8ee4b178bb9ecb7658c8e976079b7515e3ecacff5cb9b6d31e7965d897098506522b8ef1a327f76b09f0808008e00", @ANYRES32=0x0, @ANYBLOB='\b\x00M\x00', @ANYRES32, @ANYBLOB="08001700030000000c001c00080000000000000008007100", @ANYRES32=r0, @ANYBLOB="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"], 0x2380}], 0x2, &(0x7f0000000400)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0x0, r4}}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r8}}}], 0x48, 0x80}, 0x11) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/76, 0x4c}], 0x1, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 23:21:31 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100005682ed1021042f04da64014203010902f9e102000000000904040001df02ff0009050e000400001c7d09040000008c6a0700b322b837d8ef40b78ce5bd0193963b827c39458a58cf6afd6051afee7f119c43367cfc6c75b70743c01e14b9d60630bfe4a63d119dc60faacee88b"], 0x0) syz_usb_connect$uac1(0x3, 0xef, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x3, 0x1, 0x80, 0xa0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x80}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x302, 0x4, 0x2}, @selector_unit={0xb, 0x24, 0x5, 0x4, 0x8, "82c3a6e4457c"}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x3, 0x9, "99bde5b2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x89, 0x7f}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xc64, 0x3, 0x0, "1f"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0x4, "b3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x10, 0x1, 0xff, {0x7, 0x25, 0x1, 0x0, 0x1, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x1, 0x9, 0x1f, "0fa1cfde5a2fc348"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x1f, 0x5}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xf8, 0x4, 0x2, 0x20}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x20, 0x0, 0x1f, "d277a743248156cb0f"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x0, 0xec, "12e5"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x0, 0x4, {0x7, 0x25, 0x1, 0x2, 0x5, 0x2}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x299, 0xa3, 0x6, 0x4, 0xff, 0x1}, 0x1d, &(0x7f0000000140)={0x5, 0xf, 0x1d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x2, 0x0, 0x24}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x6, 0x200}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x6, 0x1}]}, 0x1, [{0x95, &(0x7f0000000180)=@string={0x95, 0x3, "cd5e2341adfa7a5524a01719ca2bdf846781573fbe17c5f228dab950281ffe9534eaad7a6619802f25cca498121c1879890657e3d55f49dc4dfdc4e242c3718e605b1c40eaf1be394ad07b47177102c9d64ba237cdc4e50a352b79bf8f55c06e88a7bfbece1a3bcef9740342535c2c7abfa0c8959e852df79d37fd1c38bce0bfa9e4feba52c57a85accc9fdcd5be53bae9c0d7"}}]}) [ 280.666483][ T9613] loop2: detected capacity change from 512 to 0 [ 280.746485][ T8434] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 280.755834][ T8434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.764284][ T8434] usb 1-1: Product: syz [ 280.768571][ T8434] usb 1-1: Manufacturer: syz [ 280.924508][ T8434] usb 1-1: can't set config #1, error -71 [ 280.966036][ T8434] usb 1-1: USB disconnect, device number 10 23:21:31 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x26a4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x7ff, 0x513000) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000180)=0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) [ 281.563938][ T59] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 281.812311][ T59] usb 1-1: Using ep0 maxpacket: 16 [ 281.936850][ T59] usb 1-1: config index 0 descriptor too short (expected 57849, got 36) [ 281.945814][ T59] usb 1-1: config 0 has an invalid interface number: 4 but max is 1 [ 281.954106][ T59] usb 1-1: config 0 has no interface number 1 [ 282.177128][ T59] usb 1-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=64.da [ 282.186517][ T59] usb 1-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 282.194985][ T59] usb 1-1: Product: syz [ 282.199266][ T59] usb 1-1: Manufacturer: syz [ 282.204236][ T59] usb 1-1: SerialNumber: syz [ 282.324073][ T59] usb 1-1: config 0 descriptor?? 23:21:32 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000005002000000000250252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c1001000000000000000001120000000022001601", 0xa0, 0x8800}, {&(0x7f0000014600)="2200160100000000011600080000000008007809140b2a3a0802", 0x1a, 0x8b000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d6f64653d3078303030301a30301030302a5d517886662c00a16119f310e7622db55074c6721240e0540fd9439543d548b4bff5359da2e593758df08dc260"]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = dup2(r0, r0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@getqdisc={0x38, 0x26, 0x2, 0x70bd2c, 0x9, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {0xa, 0x10}, {0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}}, 0x0) [ 282.569769][ T9635] udc-core: couldn't find an available UDC or it's busy [ 282.577212][ T9635] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 282.634465][ T8435] usb 1-1: USB disconnect, device number 11 [ 282.725181][ T9656] loop1: detected capacity change from 2224 to 0 [ 283.142303][ T8435] Bluetooth: hci3: command 0x0409 tx timeout [ 283.432613][ T8435] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 283.694521][ T8435] usb 1-1: Using ep0 maxpacket: 16 [ 283.823193][ T8435] usb 1-1: config index 0 descriptor too short (expected 57849, got 36) [ 283.831726][ T8435] usb 1-1: config 0 has an invalid interface number: 4 but max is 1 [ 283.840102][ T8435] usb 1-1: config 0 has no interface number 1 [ 284.002938][ T8435] usb 1-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=64.da [ 284.012926][ T8435] usb 1-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 284.021154][ T8435] usb 1-1: Product: syz [ 284.025593][ T8435] usb 1-1: Manufacturer: syz [ 284.030304][ T8435] usb 1-1: SerialNumber: syz [ 284.092838][ T8435] usb 1-1: config 0 descriptor?? 23:21:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x126, 0x0, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x3a, &(0x7f0000000480), &(0x7f0000000140)="760ac38f81d2fa83bdaeab8d4d264893680984e726594b3d2f8e3522ac3322d667f5360954b8a711e6dd2d74be70640cc29407befb9349a42360"}, 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000400)=""/41, 0x29}], 0x1, 0x4, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x6c000000, &(0x7f0000000000)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x4, 0x0, 0xc2, 0x2}}]}, 0x28}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r5, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1800007, 0x80010, r6, 0x0) getpeername$packet(r6, &(0x7f0000000480)={0x11, 0x0, 0x0}, &(0x7f0000001180)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x88ce}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @generic={0xe9, 0x3, 0x1, 0x0, 0xfff}, @ldst={0x2, 0x0, 0x1, 0x3, 0x7, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @exit, @jmp={0x5, 0x1, 0x5, 0x2, 0x0, 0x30, 0xfffffffffffffff0}, @map={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f0000000280)='GPL\x00', 0x416d, 0x0, 0x0, 0x41000, 0x11, [], r7, 0x23, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xf, 0xfffffff9, 0x400}, 0x10, r5, r0}, 0x78) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000000)=""/29, &(0x7f0000000080)=""/87, &(0x7f0000000100)=""/154}) renameat2(r6, &(0x7f00000011c0)='./file0\x00', r8, &(0x7f0000001200)='./file0\x00', 0x0) [ 284.363406][ T8435] usb 1-1: USB disconnect, device number 12 [ 284.699575][ T9684] hub 9-0:1.0: USB hub found [ 284.725101][ T9684] hub 9-0:1.0: 8 ports detected 23:21:35 executing program 0: socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="26c50000100007477e815bc407db496b13d33b27d6cdac27544ee7a6fe2e3a8aee56b7e1f98874d1a184593e", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100000000000000008000a0009d35b"], 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 23:21:35 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) fstatfs(r0, &(0x7f0000000080)=""/101) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan0\x00'}}]}, 0x38}}, 0x0) [ 285.213532][ T8435] Bluetooth: hci3: command 0x041b tx timeout [ 285.415382][ T9695] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 285.430983][ T9695] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 23:21:36 executing program 0: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9) syz_mount_image$ocfs2(&(0x7f00000007c0)='ocfs2\x00', &(0x7f0000000800)='./file1\x00', 0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)={[{}, {}], [{@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 285.774282][ T9613] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 285.818430][ T9585] IPVS: ftp: loaded support on port[0] = 21 23:21:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001340)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x101, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2005081f}, 0x85) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x2f, 0xfc, 0x6, 0x1, 0x8, @ipv4={[], [], @local}, @mcast2, 0x7, 0x700, 0x2ce, 0x3}}) r6 = fsmount(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000200)=@raw=[@generic={0xc1, 0x0, 0xa, 0x4, 0x9}, @call={0x85, 0x0, 0x0, 0x44}], &(0x7f00000002c0)='GPL\x00', 0x1, 0x30, &(0x7f0000000300)=""/48, 0x40f00, 0x8, [], r5, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xb, 0xaf7, 0x6}, 0x10, 0x7472, r6}, 0x74) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00', 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001340)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x6c, r7, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x362}], @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) 23:21:36 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000005002000000000250252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c1001000000000000000001120000000022001601", 0xa0, 0x8800}, {&(0x7f0000014600)="2200160100000000011600080000000008007809140b2a3a0802", 0x1a, 0x8b000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d6f64653d3078303030301a30301030302a5d517886662c00a16119f310e7622db55074c6721240e0540fd9439543d548b4bff5359da2e593758df08dc260"]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = dup2(r0, r0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@getqdisc={0x38, 0x26, 0x2, 0x70bd2c, 0x9, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {0xa, 0x10}, {0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}}, 0x0) [ 286.671038][ T9811] loop1: detected capacity change from 2224 to 0 [ 286.764918][ T9585] chnl_net:caif_netlink_parms(): no params data found [ 287.101940][ T9585] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.109436][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.119146][ T9585] device bridge_slave_0 entered promiscuous mode [ 287.137657][ T9585] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.145955][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.155804][ T9585] device bridge_slave_1 entered promiscuous mode [ 287.211102][ T9585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.233486][ T9585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.304800][ T8435] Bluetooth: hci3: command 0x040f tx timeout [ 287.364661][ T9585] team0: Port device team_slave_0 added [ 287.384412][ T9585] team0: Port device team_slave_1 added [ 287.442297][ T9585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.449899][ T9585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.476507][ T9585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.520653][ T9585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.528079][ T9585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.554785][ T9585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.637568][ T9585] device hsr_slave_0 entered promiscuous mode [ 287.651490][ T9585] device hsr_slave_1 entered promiscuous mode [ 287.667773][ T9585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.676555][ T9585] Cannot create hsr debugfs directory [ 288.185417][ T9585] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 288.276990][ T9585] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 288.366498][ T9585] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 288.426002][ T9585] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 288.639956][ T9730] (syz-executor.0,9730,0):ocfs2_parse_options:1469 ERROR: Unrecognized mount option "euid>18446744073709551615" or missing value [ 288.653619][ T9730] (syz-executor.0,9730,0):ocfs2_fill_super:1190 ERROR: status = -22 [ 289.000231][ T9585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.061677][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.071180][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.101472][ T9585] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.145625][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.155599][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.165080][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.172569][ T8435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.226026][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.235283][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.245792][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.255080][ T8435] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.262387][ T8435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.271561][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.282648][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.358133][ T9585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.369079][ T9585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.400783][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.411314][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.422169][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.432654][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.443048][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.452614][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.462916][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.472599][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.646466][ T9585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.692776][ T8812] Bluetooth: hci3: command 0x0419 tx timeout [ 289.706216][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.716421][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.725592][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.733871][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.830340][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 289.840560][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 289.940686][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.950737][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.987664][ T9585] device veth0_vlan entered promiscuous mode [ 289.996150][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.005410][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.053398][ T9585] device veth1_vlan entered promiscuous mode [ 290.128674][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 290.138664][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 290.148318][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.158402][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.181552][ T9585] device veth0_macvtap entered promiscuous mode [ 290.202305][ T9585] device veth1_macvtap entered promiscuous mode [ 290.267514][ T9585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.278220][ T9585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.288864][ T9585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.299585][ T9585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.309809][ T9585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 290.320644][ T9585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.334972][ T9585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.343139][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 290.352959][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 290.362613][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.372869][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.431188][ T9585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 290.441924][ T9585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.452161][ T9585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 290.462887][ T9585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.472939][ T9585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 290.483634][ T9585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.497666][ T9585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.514908][ T8434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.526985][ T8434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.550275][ T9585] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.559633][ T9585] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.568733][ T9585] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.577751][ T9585] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.884200][ T23] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.893147][ T23] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.909443][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.087283][ T1273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.096005][ T1273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.119368][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 23:21:42 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xd8c, 0x22, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) syz_usb_connect(0x4, 0x5d8, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x28, 0x92, 0xc8, 0x10, 0x5c6, 0x9065, 0xc1e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c6, 0x1, 0x5, 0xff, 0x90, 0x8, [{{0x9, 0x4, 0x6, 0x40, 0xc, 0xb6, 0x24, 0x52, 0xfc, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "3d768d016b"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7fff, 0x3, 0x8}, [@mdlm_detail={0x90, 0x24, 0x13, 0x8, "6d36003d3bc49fc850aa8cc306c8c329e8690e7082b0bca5730eec0a5df9543d9522b04d77f9d91d65c30103307bf829c654dfbdba7f5d2fd9e6baec96e395c72bb630ad866f96173a620ce1409a3d9c48b61f60d102cad396101475a7ae8d9f965cffc41443ac0e4fa7a94d6c553971aa6e3bd75f63c81e77523e137806a475ad834bfefc2f676b6839e18e"}]}, @uac_control={{0xa, 0x24, 0x1, 0x4b2, 0x80}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0x3, "f8afa89f4c"}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x9, 'j'}]}], [{{0x9, 0x5, 0x2, 0x2, 0x40, 0x5, 0x4, 0x9, [@generic={0x10, 0x3, "e4c4e53123c464e302b9a6832a5f"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0x3f, 0x5, 0x9, [@generic={0x4e, 0x11, "da4d85e52d48d6343bd216f6f454cadea6b4b4c85ae671465f0affaeadc2a57e63f192aef11bae139b659b67228d3b7ff8e6de915f83baf4fb02f1c7017bcbef2490ad8927eb8d8f0b48d323"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0xe4, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x4}, @generic={0x11, 0x11, "ebaa32a6c57cb2fb8f8074e8ba758c"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x0, 0x1, 0x1, [@generic={0x3b, 0x9, "fa5022250cecf8daf02b54f3ebe69f04ea3852ccff2a698ee0b6f69b38ec19c827997aa14e2a016a4530176997cba614ceb8454a3f28bad7ad"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x1, 0x3, 0xd5, [@generic={0xce, 0xd, "5700720c45688d536d815536349230e401f29a5b335e73ddba3ca70ab24f7d9014c0485e2ddc8af14c490fa9b5f8241a55ff4b0b9f88c6f88fc5a5b45833002f39e490009ef753301de80a6a1454397d7e4a0f302f5f3697de2432329667f63e7b05e2ae6199d353f838992dbe35596753c220b5ef1202826fad0c35637f152cc34bbe4043bb3a2460882e16d1e77f89cf4bbf786620aaa143b9802a070b38cf97055ca7f5b35d3ecb8224a0f507405929e3a51e3431b1bbf58756d328f56ad9a21eb555831014dbafd76f6d"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x0, 0x7, 0x81}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x4, 0x7, 0x8}}, {{0x9, 0x5, 0x2, 0x34227aaa637e76cc, 0x400, 0x7, 0x5, 0x9, [@generic={0xe3, 0x7, "67c49d3cf03a67a1d94133183683b651be66bcd46e4d8df073dce4c437f9b7c627e95c1ad87f01de192d780f19ccd3b4ee4784e7c7b11fc91c9364f0916f3b2f0de45983a396232815e7592a187e13fd00f5e133b891149dc6b9ea0eb71cb8e1d903fd3a9c31c610083d1850daca8917decef1367ad102d76df07c9ab81dabcd82d5aaaefc08628b08e0836c803b8eb2c80010cd8a294cd6ec6c63a570aa3f7505212ce234b58783b6eac54d515c1a00c20f6a2f4c582710ae7d767353bb9c5436a3501ad56ced5304073a7294d034d9592d632cc83565a4afe0674bf21d838d67"}, @generic={0x80, 0xe, "76832bb4262f30a9aa718fbfb7d106cd5fba14437e1fd157f773c16b57f0cb2b474f7d550f2a74308f7f74ea45174c228566208fd00dd6253c02912e4da2d47c08bc935a678cc85aa447f4414e5cf946702deb1c5e3560085bc8da1efc434fae1e86ff4bc5cdaf0dc820018d55e6a0b92aa7a288465b9dee4d3ff0dd6d89"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x3f, 0x9a, 0x70}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x1, 0x6, 0x1, [@generic={0xa4, 0xc, "bc42f875ce391898359db07935848e95185424239899451d3fa69a7ec835ebb9db46f5795cd144dd7725239b0d97198a83921824af88ccbd3da5fed9c40d69264f34495cf638f14ae1e3d2d39538813736440c5882e1fc5ad9b0cb17f4ff5464c74212f2340f4d4e28bbc86d38aa6868a37a2a6ae5f99831fb7b7ab77e3381f82b8fc0696dc3b5349333b7a4d2aa71be110ccf5b8349cface3d099928c13904c6802"}, @generic={0xf6, 0xc, "f817a5dde476b63474aa04113bf5f6bfe2ed42de263f981904ab21ae3e6a5efd159ce1f130d11dcc673683a123efd47ef4b9513b75242eb023cce47eadc05842cfb9dccdfb06178ac6bfe49d7404bb854023aeffe42eded657e7f4f13a0fe52460284ee6a013409645f6af6b6adea93ddac8ca104e18acf6221659136a48f5ad971618805297875e1ca02858d9a7687f06a6088dd2a83c4c9328f139b119932911617f34b7a99c5555753f2bee79ce97ce9820e7949b38f9537787ce39246b882d418a47baf0b8fde5620c0a7b3aa12cc303dfcc7a9d42fca78e96ad2efed6aa5be2027051048692fea2878faf2f2dc4aa3acf86"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x458, 0x8, 0x6, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x0, 0x40, 0x16}}]}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x1, 0x20, 0x5, 0x40, 0x3}, 0x77, &(0x7f0000000100)={0x5, 0xf, 0x77, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "f4f4f3da12faa290834a99d3a2e368cf"}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0x9, 0xf0f, 0x23, [0x80803f, 0x3f3f, 0xf0, 0xf, 0x0, 0xff0030]}, @ssp_cap={0x10, 0x10, 0xa, 0xff, 0x1, 0x6, 0xf00, 0x2, [0xfe800f]}, @ssp_cap={0x18, 0x10, 0xa, 0xa4, 0x3, 0x8, 0xf0f, 0x8000, [0xffc0, 0x0, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x0, 0x1a, 0x800, 0x1}]}, 0xa, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x44c}}, {0xfb, &(0x7f0000000180)=@string={0xfb, 0x3, "0b308b798f19366c61f147db156ac72aa3127276ff7b15e126621c1e77ca0d89f3544f9e9b0df85072676ad05e6da2934ac3831291c77cfe95b5360454a71434f68f452d1fcaf2a728e198b82708ecf6ff38749b075c0b07627fc0526b0debec55d893bf39cfa9de9b23160a0c6c9ba68d30a3e8571bb7f7fd2a9fd333ce93516bc178af527921b253bf314e5f4c42ea257fabbf35f99a24847fd6534cc7e4d8c2a79db67c24fecdc7b850b20220ab8930c11def464f4fa9035fd070c4751e8c9caed8b59541f77b98c8306a5d634bd3d381aa7b49a03c76503dbc4840d391c5eecc0567d9d3b2cb0134a8bd9d3265a0a5ab286d15a84db31c"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x449}}, {0x8f, &(0x7f0000000380)=@string={0x8f, 0x3, "e8dc56e1efb9f79f7abc1e96ed8570a10c982cbf35be02e0998776b26bcda88656f783765477f2cd15add7578f55ff13d73dcffef61bdee81c00c9c1b3f385e3ee092639e6b467a5b5dc521c248468f3d6d60d697537c86ca3239bcc1ac61020c209a263f3b103636bcb01ae87b94bc2875acc814a8f3fcb6fcd205ab554282b0a34b2ebffa49f1e5327e638b8"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x445}}, {0xeb, &(0x7f0000000480)=@string={0xeb, 0x3, "1fd70975d6f125b8935de0f1f742b067b1349e826b0aa868a11d66d3224c008f4fe162c371a3a71ad10c7217a0ac0b58cd143da774a275bb748df9fcb9f27dfbd63e1d855ae1c15bde63d41f3cdb5a3b7b62cb7402206a7d91673b7f70ef06601088ee95e73f1910db92a33d9846e55ac0dc7b3e8eefe1a5263776fab328a037573bd4df6e45452b9ddfeb3035d55ced61f3c8235620c1b62e2438d8294167441c9410015a4d61fb7a0c5ec8b61da1cdbc2730543b430dbc4f50fb6e14fb1f2ecf59eec59224007ed4fc392988ed02d6f69677ea6bb5d4087135700d33521ea6f7b58e85c11981c8c1"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x418}}]}) r1 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000040)={0x3}) 23:21:42 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xfe, 0xd3, 0x84, 0x8, 0xeb1a, 0x2801, 0x81d3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd, 0xd5, 0x3e, 0x0, [], [{{0x9, 0x5, 0x84}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2c24, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xb, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0xa}, @global=@item_4={0x3, 0x1, 0x0, "eb2ee52b"}]}}, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x18, &(0x7f0000000000)={0x40, 0xc, 0x7a, {0x7a, 0x23, "1aad6acd921d683212932a703708f2439961fa5efdf009978bf664e731eab951010540056e3ed9124683fd42a9ca81843886c76799e0c834be68ab980321d865d2226deffb31fbc921408ead915dc831857e003e5b871061c9b00c72be578c056f08340d264f73b3c75d9038c51774b002ff270a0438eee6"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x80, 0x3, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x80, 0x0, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xd8, "6f025ee626a85602c098181f7892cdd7"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8d78038e56185c8d, 0x1a, 0x2, 0x82, 0xa8}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0x1, 0x21, "9c5c87c3", "4026ea6b"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x0, 0x9a, 0x7, 0x1, 0x10, 0x7}}}, &(0x7f0000000680)={0x44, &(0x7f0000000200)={0x0, 0xe, 0x55, "4bc53ead083fea294ca0ae48d7e65921c62930de9773760fb0a75ae4d72b7028344365e1f574ea91c4515ec3106c4991a2761650392bb9ed051aa7a2ac4e8db235170a8fea2b9bf3f83da5edacb27223a220ef6a8e"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xfd}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0xc0, 0x20}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x401}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000400)={0x40, 0xb, 0x2, "2211"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000480)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000004c0)={0x40, 0x17, 0x6}, &(0x7f0000000500)={0x40, 0x19, 0x2, "1dd2"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0xff}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x59}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x8d}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 23:21:42 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c65300a64d1d37b8c85842ffe094d8378ac90e154db2b2c0d0c6e22db25e61da693414befd617c6659c715ca047e8b9463d82a268675a32cecd5d00a7bd05cc335e9022927cdee86bdcfcb65f2644ab6e94f76e549fba78d861e657557fc33291de96eeed856dbbc51e6cda11535c638e31b45686c70d53bf53c44f5202ea33c1be08f3dbaf91c62e5817678ae7d14f69e9dbca82a39a84d475901ce8d169bbb565f19edd9f04b03be6c1bd5a579a8de0ea8aff69ea6ee099621d2d063fcff42865497c0c95591daeeb640cea4a61ff21a32982"], 0xb) 23:21:42 executing program 1: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4, 0x9}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000440)=@newtaction={0x64, 0x30, 0x53b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x2, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00', r1) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x36a3}, 0x1c) 23:21:42 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) 23:21:42 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r0, &(0x7f00000000c0)="243992f5f7a98539f0968a41e78bf6c65d4a5efa0bfe179ce3648d0c6e12edfcff9b67b8c55b6cdee36b06b8b943ad91d60e550d03ce824f9599b84d567e441ae213e1b83c2afb", 0x47, 0x42800, &(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)='#', 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000840000000200"/24, @ANYRES32=0x0, @ANYBLOB="1c000000840000000800000033"], 0x38}, 0x0) [ 292.082760][ T5] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 292.322307][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 292.385391][ T8434] usb 4-1: new high-speed USB device number 2 using dummy_hcd 23:21:43 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x5a}, 0xfe85) setxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0xf5, 0x30a2}, {0x0, 0x28e}]}, 0x14, 0x2) write$P9_RLERRORu(r1, &(0x7f0000000280)={0x21, 0x7, 0x1, {{0x14, 'security.capability\x00'}, 0x6bb8}}, 0x21) fcntl$setstatus(r0, 0x4, 0x46900) ftruncate(r0, 0x800) lseek(r0, 0x20400, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000001c0)={0x200, 0x2, 0x10001, 0xee82, 0x3, "4a6f2c68fe5e1c9e7c195abca7123874ee132c", 0x26, 0x10001}) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000240)) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000000)='./bus\x00', 0x0) [ 292.443713][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 292.453974][ T5] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=81.d3 [ 292.463500][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.526815][ T9982] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 292.565189][ T5] usb 3-1: config 0 descriptor?? [ 292.596845][ T9986] overlayfs: filesystem on './bus' not supported as upperdir [ 292.620658][ T5] em28xx 3-1:0.0: New device @ 480 Mbps (eb1a:2801, interface 0, class 0) [ 292.629850][ T5] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 292.765214][ T8434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.778146][ T8434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.788582][ T8434] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 292.798006][ T8434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:21:43 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 292.924115][ T5] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 292.952602][ T8434] usb 4-1: config 0 descriptor?? [ 293.166643][ T9971] udc-core: couldn't find an available UDC or it's busy [ 293.173961][ T9971] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 293.198670][ T5] em28xx 3-1:0.0: failed to trigger read from i2c address 0xa0 (error=-5) [ 293.207802][ T5] em28xx 3-1:0.0: board has no eeprom [ 293.230964][ T9971] udc-core: couldn't find an available UDC or it's busy [ 293.238611][ T9971] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 293.352502][ T5] em28xx 3-1:0.0: Identified as eMPIA Technology, Inc. GrabBeeX+ Video Encoder (card=21) [ 293.362916][ T5] em28xx 3-1:0.0: dvb set to bulk mode. [ 293.369579][ T55] em28xx 3-1:0.0: Remote control support is not available for this card. [ 293.425045][ T5] usb 3-1: USB disconnect, device number 4 [ 293.432814][ T5] em28xx 3-1:0.0: Disconnecting em28xx [ 293.438516][ T5] em28xx 3-1:0.0: Closing input extension [ 293.448720][ T8434] cm6533_jd 0003:0D8C:0022.0001: No inputs registered, leaving [ 293.500980][ T8434] cm6533_jd 0003:0D8C:0022.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 293.613218][ T5] em28xx 3-1:0.0: Freeing device 23:21:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000028000400000000000000000008005400", @ANYRES32=0xee00, @ANYBLOB="6f22cb826393f8f84274456b55239f73b8ebd8d49eb1d3a5c341008061259296e69e93cb1b2cd8d1246045e9"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x41, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) fanotify_init(0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000280)) epoll_create1(0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00', 0xffffffffffffffff) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x200, 0x303400) read$FUSE(r3, &(0x7f0000002d40)={0x2020}, 0x2020) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0007000000eed4b8a0e4d6f2ea21e4bb509b69456594ffa24bba2093355a300c0b6fc20e", @ANYRES16=r2, @ANYBLOB="000427bd7000fbdbdf25010000000000000002410000001000137564703a73797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80001}, 0x8010) [ 293.706885][T10016] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 293.729167][ T18] usb 4-1: USB disconnect, device number 2 23:21:44 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 294.283091][ T5] usb 3-1: new high-speed USB device number 5 using dummy_hcd 23:21:45 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000300)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private0, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe4) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000340), &(0x7f0000000380)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x6}, [{0x2, 0x5, r2}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x0, r3}, {0x2, 0x2}, {0x2, 0x3, r4}, {0x2, 0x6, 0xee00}], {}, [{0x8, 0x3, r5}, {0x8, 0xbab365cd2e998f61, r6}, {0x8, 0x1, 0xee01}], {0x10, 0x1}, {0x20, 0x1}}, 0x6c, 0x0) [ 294.522350][ T18] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 294.524271][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 294.636254][T10039] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 294.657215][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 294.667550][ T5] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=81.d3 [ 294.677054][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.795174][ T5] usb 3-1: config 0 descriptor?? 23:21:45 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 294.849610][ T5] em28xx 3-1:0.0: New device @ 480 Mbps (eb1a:2801, interface 0, class 0) [ 294.859144][ T5] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 294.895567][ T18] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.906956][ T18] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.917127][ T18] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 294.927367][ T18] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.069030][ T18] usb 4-1: config 0 descriptor?? [ 295.112618][ T5] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 295.223347][ T5] em28xx 3-1:0.0: failed to trigger read from i2c address 0xa0 (error=-5) [ 295.234977][ T5] em28xx 3-1:0.0: board has no eeprom 23:21:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000180)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, [], 0x3d}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0x0, 0xffff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'pcbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'blake2s-160-x86\x00'}}}]}, 0x180}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001340)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x3b}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8050) 23:21:45 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000500)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) r2 = socket(0x29, 0x5, 0x0) recvfrom$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000300)={{r3, r4+60000000}, {r5, r6+60000000}}, &(0x7f00000004c0)) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x80) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000380)="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"/262, 0x106) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000080)={{0x77359400}, {r8, r9+10000000}}, &(0x7f0000000140)) dup3(r7, r2, 0x0) 23:21:45 executing program 3: r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x53, 0x90, 0x91, 0x40, 0xac8, 0xc001, 0xfc30, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf0, 0xeb, 0x98}}]}}]}}, 0x0) r1 = syz_usb_connect$uac1(0x4, 0xbf, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x3, 0x1, 0x7, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1000, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x0, 0x3, 0x5, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x5, 0x6, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x205, 0x4, 0x2, 0x4, 0x0, 0x3a}, @mixer_unit={0x8, 0x24, 0x4, 0x1, 0x2, "f0916c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x2, 0x5, 0x8, "35f598", '\'\f'}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x0, 0x40, "e3"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x8, 0x3}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x9c, 0x1, 0x0, 0x2, "ff0b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0x0, 0x1, {0x7, 0x25, 0x1, 0x4, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x1, 0x8, {0x7, 0x25, 0x1, 0x82, 0x5, 0x5}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x6, 0xff, 0x9, 0x10, 0x7f}, 0x41, &(0x7f0000000180)={0x5, 0xf, 0x41, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "701acb62bb08a3f75bcbbe506e480f83"}, @ss_container_id={0x14, 0x10, 0x4, 0x75, "1350f973841f50ce1d4a1d3f47c4e4bc"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x20, 0x79}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x81, 0x9, 0x2}]}, 0x2, [{0xbd, &(0x7f0000000200)=@string={0xbd, 0x3, "a8656359d124c032437a841c635467ca085c216880f81e3a9cbb562c02a8e0ba86fdc20f27cd9d3d7171d3f3ad7f374da2b94947c7c7c7a55ed0a595ae067d7f47cacb30a630cb3a20f0bd679d2d4db7c25913c9b4f3f591339fd483ff0be1be55a665e5e3bf31d6f34ee97943cc6d3025c99f01911716cfb4eb9fa599521a6c12af1f930f3e7284a470aa29e46d87ba6477e8a2f1fc7901916ad954a17c653e72fbb8e4c333df22c36b56d40739c1c8cc9c77f0918f6a4fd42f49"}}, {0x3, &(0x7f0000000040)=@string={0x3, 0x3, "10"}}]}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000bc0)={0x24, &(0x7f0000000900)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2c24, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xb, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0xa}, @global=@item_4={0x3, 0x1, 0x0, "eb2ee52b"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000800)={0x14, &(0x7f0000000680)={0x40, 0x7, 0x11, {0x11, 0x1, "227d376d4f1d02d16da243e53bf2e6"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}, &(0x7f0000000780)={0x0, 0x22, 0x17, {[@global=@item_012={0x1, 0x1, 0xa, "f6"}, @local=@item_4={0x3, 0x2, 0x0, "7118fc4b"}, @global=@item_012={0x1, 0x1, 0xb, 'c'}, @local=@item_012={0x2, 0x2, 0x5, '*d'}, @main=@item_012={0x2, 0x0, 0x9, ' ('}, @local=@item_012={0x2, 0x2, 0x9, '\v%'}, @local=@item_4={0x3, 0x2, 0x9, "c29d4ea8"}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0x2af}}}}, &(0x7f00000009c0)={0x18, &(0x7f0000000840)={0x20, 0x9, 0xc, "112f49b1efc368c5ad0a438f"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000940)={0x20, 0x1, 0x34, "1ee49e98fe3cd8eb5b25a5742dab7b95f93e4461ab2089fccabd1a718e8ab304798641187fc46b304203c26eb5357af4a62600fa"}, &(0x7f0000000980)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x14, &(0x7f0000000340)={0x0, 0xd, 0x35, {0x35, 0x31, "0ef94039dc9913a53b88270101961fc54d0606352e15210ccc8833b5f299c1e97983cd75ff6ed495d76efc27e8fd7aa7a72e81"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f00000003c0)={0x0, 0x22, 0x11, {[@local=@item_012={0x2, 0x2, 0x4, "ab32"}, @main=@item_012={0x1, 0x0, 0xa, "b2"}, @main=@item_4={0x3, 0x0, 0xa, "624d9765"}, @main=@item_4={0x3, 0x0, 0xb, "6f6f33d7"}, @local=@item_012={0x1, 0x2, 0x0, "bb"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0xa9a}}}}, &(0x7f0000000640)={0x18, &(0x7f0000000480)={0x40, 0x14, 0x90, "0c32fc90b3dd88fdf1085f5d14aa917e300000d98ca050d8c7263fd0b128f560fce5a5850358805daeb7e488b3eaf71ac576b995250aadf8d539f54068de61b9b85ca07a138069c85be6d6338b5715351689375dd836eb9d928d9d582607aa0c6b25aea20082017dca117ab9d32bf1242847cf68a4c8e0695a053f551c4932e3f2c0510468d500"/144}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x96}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000005c0)={0x20, 0x1, 0x16, "fea21d441cb9f2d51e33e0e303dd80d8eb774bd96e53"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x41}}) [ 295.362224][ T5] em28xx 3-1:0.0: Identified as eMPIA Technology, Inc. GrabBeeX+ Video Encoder (card=21) [ 295.372574][ T5] em28xx 3-1:0.0: dvb set to bulk mode. [ 295.379154][ T9303] em28xx 3-1:0.0: Remote control support is not available for this card. [ 295.424955][ T5] usb 3-1: USB disconnect, device number 5 [ 295.432643][ T5] em28xx 3-1:0.0: Disconnecting em28xx [ 295.494823][ T5] em28xx 3-1:0.0: Closing input extension [ 295.503884][ T18] usbhid 4-1:0.0: can't add hid device: -71 [ 295.510186][ T18] usbhid: probe of 4-1:0.0 failed with error -71 [ 295.547326][ T5] em28xx 3-1:0.0: Freeing device [ 295.583015][ T18] usb 4-1: USB disconnect, device number 3 [ 295.719691][T10066] overlayfs: "xino=on" is useless with all layers on same fs, ignore. 23:21:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x64, 0x6, 0x4d0, 0x0, 0x258, 0x408, 0x258, 0xc8, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00'}}, {{@ipv6={@remote, @mcast1, [], [], 'bond_slave_0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24, 'CHECKSUM\x00'}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4, [], [], 'hsr0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@loopback, 0xfd}}}, {{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_batadv\x00', 'ip_vti0\x00'}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) r1 = syz_mount_image$befs(&(0x7f0000000000)='befs\x00', &(0x7f0000000040)='./file0\x00', 0x3ff, 0x5, &(0x7f0000000340)=[{&(0x7f0000000080)="6e1a4764aa8feda2a0ef684fa43ba0b20e6a786f4fe979fcd98a8aded86145583b811e0a8fa1e3334b74d5a1565254eac4f4ee2e2bfe6ec544dcee99beb5cb1a01b054f189fc4e295835cf31fe6c5ae4817a50f681d30b0665932ebf44a9657c9d65b096abb0dfa55aae67238c3e2fff269aa5265a35e7aab1d257eb5fc820d93c1186f5f85ea9b1cd47d05d1b769ee0811b64", 0x93, 0x9}, {&(0x7f0000001000)="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", 0x1000, 0x3}, {&(0x7f0000000140)="c5b3f62b66821df85c06cffb17b4982698fcde774442ec1e0b62ea8685239c8a4a4f1cddef03b86bb4746c264b36d721678ec55e52d290c29fd941f60333133956da98dfa0cfd4f4a9fdc3fb4558488986321b7a0a97066ab421561d30d762d094f7c488b63f4cef46cbe77978d430b9a8ca76a6ad8c8f0e8e8a4687da783cff5690bfb11a914bf03fe293fbf3cf7ce2449a7539f93995cf14504c45be0aca08c78262adc5845410177103c02af46b6ef6c543043cd37d3cbf25bbc52197286229136c00d91550fcacb4f216ececa7e185f98837cd72c89ae0c6e16958327928c28473bd4b65a8e2af004c6e2e", 0xed, 0x81}, {&(0x7f0000000240)="3b69b8f8e2788cc97793b6ad5d7769ee5ec3cf39921873db6d8aa70facc90a0a69c9dbbabc6455edad823a2b12fb498a083b5254a33c966ddf924467f9b83bfeac2e3b448744c5b3f92a777e69", 0x4d, 0x3f}, {&(0x7f00000002c0)="73565c2486f74a236b4d7ffa13cd1d2884f770ed344af8dee8902db65163ccd87078cbdc7dd389891ed2fb6a72515699fd499f6994810422ad85d16c44dd159b41f80a7daf33b482b2033e3f9ab15bf6e7346d5857b0", 0x56, 0xff}], 0x804003, &(0x7f0000000540)=ANY=[@ANYBLOB='CHECKSUM\x00,veth1\x00,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c6f626a5f047970653d2001002c7569dd1d1e08ea13c13d20d5643e", @ANYRESDEC=0xee01, @ANYBLOB="2c70637252303030303030303030303030303030303030343a2c00e559f489bcf0716c96dd316e902e302ea4896a7275b78bfac9abdfe2fdb78c427131c9011b36bc491515dbdfa360333a62538826fd6420394d399a02e491b775748c846ea83cc087423c0baf3e1a9610e7e7e4"]) r2 = openat(r1, &(0x7f0000000400)='./file0\x00', 0x0, 0x16) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x8800, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@gettaction={0x7c, 0x32, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff81}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ftruncate(r2, 0x80) 23:21:46 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 296.022575][T10082] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 296.084289][T10082] loop2: detected capacity change from 8 to 0 [ 296.128494][T10082] befs: Unrecognized mount option "CHECKSUM" or missing value [ 296.136247][T10082] befs: (loop2): cannot parse mount options [ 296.203515][T10085] loop2: detected capacity change from 8 to 0 [ 296.216586][T10085] befs: Unrecognized mount option "CHECKSUM" or missing value [ 296.220040][ T18] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 296.224548][T10085] befs: (loop2): cannot parse mount options 23:21:47 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0595, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$setstatus(r3, 0x4, 0x42c00) writev(r0, &(0x7f0000001640)=[{&(0x7f00000001c0)="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", 0xfe}, {&(0x7f0000000000)="fa842749ae1dc2c4d3eb27e05815cb2c486e5faaa9d8403b5ea50d6c56eeee20afae5433b6442e9eb0359287d0", 0x2d}, {&(0x7f0000000080)="54d7cf54b974715ae3f7e121071b58cea888937a7065d089d0f8842ffdf63659650c3739ffd6", 0x26}, {&(0x7f00000002c0)="f6e30c7d581ff44d0d1ab2a98f5a2c1cb05265b44e51347c521206e8ac82ed7f8f634fb6c70805ffc172e8b8d9c2fc8cec17ae9e6fb2d129b28cdc9d3f1e946f2287af520e84d8709105bbb68bc56d5c3ab8401aaf782b009e4f0ea06a5da90eed61d2af4b62e505876308bdd07caea26da150cb07dfbee7c702933fe1d1f012287245d9483c43801678ca1823730303e356cb52639f7d1df8eeb7bd6719a64174b4e255122b773bf98ddd1b71b12c5abd9dc6d0e85ffb61a56270e4837f37f194bdc4bdde083e5e28cc4659deb687fa49e915b07db8e863faf66f327e2fdefdb3371548f99d9898439d2016969e72fc88", 0xf1}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="49aa23c053fd60d822a7b37c93c4b4864f8373ea3654e87af9334fcdbe5d0ca08b511ae9f22ff118c91aeac1200274686730090f5207c4bf56166265351c5a2290fe1c871cd5f798c0e210dd5c34229d9c3ade05e09e8c324715725f403c6534175945dbb0fec28576d63f73a00a8972f8d36c91fb", 0x75}, {&(0x7f0000001440)="f937461340869abce640c8163301d7e491b994c8d316edd63f34c4ce71bd22873a4fb17b43e6928394df69c1c19c55734740d03ec1c4efa05c932a3e8179c637d8d08a541112740868c9b4a10e8eb098c1da8f497e84c9c3b1b61ce5f115fa59013a12d6e6a1da52679d7a34361e26a6ae06d5f48dd19fa5fc82a7c9471f9d272295abea1b7015c6d13b20a613efd0bcac90fc162f59a1a36d345bfc2e2711c30522bf67d688977704f01579ece91d5663ef6adcefc9be0b1bd7", 0xba}, {&(0x7f0000001500)="4fbb08509a7ac0df25db923af851eee593d0722c4c219dc057af9b985d8340e3712328c1c9b92d334cf25f51b414e6f744cbf8db4388d5205e65c212234544cae9acdc9e370806e47f88272f1ba576679feb218e4a39682d95ac0e499fbc0a2417b7c88e79bea84e3d46fdd0c2244d100400727de6aaedf5", 0x78}, {&(0x7f0000001580)="5fe18e0b6c28cc56cfda8d31d5a639d862f54cb3963d052789040d6c6f8d218e964f33738a87561a5dfe05091a5dea648ce8d7efc30ac9f50493aec1697a45d5ba36e2301af834b07e4ace4b52e7550c16fbdb84a4ea7101274d977bfd889a587dc529734f8fb63b973d396463956e5f722f0a1ad066244776feb49be9cc15c478633198ba3024945237c00220913ca4678854c390fcf631d9eaaf07d581b765e6b53cd98e8d40cbe048d56b75dfccf945bb1ed6", 0xb4}], 0x9) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 296.473508][ T18] usb 4-1: Invalid ep0 maxpacket: 64 23:21:47 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 296.632548][ T18] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 296.872961][ T18] usb 4-1: Invalid ep0 maxpacket: 64 [ 296.878998][ T18] usb usb4-port1: attempt power cycle 23:21:47 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) 23:21:48 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 297.634709][ T18] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 297.756475][ T18] usb 4-1: Invalid ep0 maxpacket: 64 [ 297.851516][T10107] overlayfs: failed to resolve './file1': -2 23:21:48 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x4, 0xffffffff, 0xacd3, 0x5, 0x7, "e338aec805ec9d364787ef46eb295ada8e0ea4"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000003b870108000000000000000000000000240002001400010200ac1414aa0c00028005000100000000000c000480080001400000000008000540000000000900010073797a3000000000"], 0x58}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1f8, 0x17, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x188, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x8000}, 0xc8000) [ 297.912302][ T18] usb 4-1: new low-speed USB device number 7 using dummy_hcd 23:21:48 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 298.014953][ T18] usb 4-1: Invalid ep0 maxpacket: 64 [ 298.021352][ T18] usb usb4-port1: unable to enumerate USB device [ 298.350108][T10115] overlayfs: failed to resolve './file1': -2 23:21:49 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) 23:21:49 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x400, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00', 0x6, 0x0, 0x0, 0x3, 0x6}, 0x20) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x40, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x7ffc) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) read$FUSE(0xffffffffffffffff, &(0x7f0000001200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000003240)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x102, 0xffff}, 0x0, 0x0, 0x1, 0x2, 0x0, 0x101, 0x4, 0x1ff, 0x4, 0x8000, r4, 0xffffffffffffffff}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0xe}, [{0x2, 0x599c60e45fae15b0}, {0x2, 0x3}, {0x2, 0x4}, {0x2, 0x6}, {0x2, 0x2, 0xee00}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x1, 0xffffffffffffffff}, {}], {0x4, 0x4}, [{}, {0x8, 0x3}], {}, {0x20, 0x5}}, 0x74, 0x1) read(r3, &(0x7f0000001340)=""/102381, 0x18fed) r5 = syz_open_pts(r3, 0x0) dup3(r5, r3, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='omfs\x00', 0x0, 0x0) 23:21:49 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) socketpair(0x21, 0xa, 0xfffffffb, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$qrtr(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x0) write$qrtrtun(r0, &(0x7f0000000180)="a7", 0x1) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) write$qrtrtun(r5, &(0x7f0000000280)="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", 0xfa) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '.'}, {0x20, ',!*'}, {0x20, '/dev/qrtr-tun\x00'}, {0x20, '/dev/qrtr-tun\x00'}, {0x20, '/dev/qrtr-tun\x00'}, {0x20, '/dev/qrtr-tun\x00'}, {0x20, '/dev/qrtr-tun\x00'}, {0x20, '/dev/qrtr-tun\x00'}], 0xa, "8188b395d6f9cea10451932839e8d38335d3328e8084d1ad3727ca0a3af545e7b79eb06f48433da7f4bcf0ee2ae7ad85d63897561b4a17eb8ed0a2d89bc8fb15a7ad9a3be04a"}, 0xb1) 23:21:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x408, 0xb4280) ioctl$SG_GET_PACK_ID(r0, 0x5382, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = dup3(r1, r2, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r3, 0xb) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) [ 298.939493][ T1982] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.994796][T10123] overlayfs: failed to resolve './file1': -2 23:21:49 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) 23:21:50 executing program 3: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)={0x9, 0x20000000001, '\v'}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000000, 0x12, r1, 0x0) getdents64(r0, &(0x7f0000000300)=""/54, 0x36) 23:21:50 executing program 1: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040), 0xc, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0x21, 0x53, {0x53, 0x22, "2d9fd7475ad0475d96a111ec98f42927e5202dbbe0fc05ab2425ef3d286f03cafe4f7432ea3eedb1f796e15469e6f31e4c03b5c2cb9b8b6d95d4bb293817b9efe61003b60e91a4a58a8a4a1593b1a5304b"}}, &(0x7f0000000480)=ANY=[@ANYBLOB="23d4be564dbf09c15da8c2d3abfe0aa53e2fb1f3bdbb057e5e04"], &(0x7f0000000140)={0x0, 0x22, 0x13, {[@local=@item_012={0x2, 0x2, 0x2, 'jO'}, @main=@item_012={0x2, 0x0, 0xc, 'f\a'}, @main=@item_4={0x3, 0x0, 0xc, "aecdfcf4"}, @global=@item_012={0x1, 0x1, 0xb, "ef"}, @global=@item_012={0x0, 0x1, 0xd}, @main=@item_012={0x2, 0x0, 0xa, "48d4"}, @global=@item_012={0x1, 0x1, 0x7, "a2"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff9, 0x0, 0x1, {0x22, 0x411}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000200)={0x40, 0xf, 0x5b, "efff22973f3898efe6ac2d59445bfba5db6c3cc11ede6a38e1b75b9942d15a911a5978243afb7a98e60ec6fcf87d433cb64b0e4a58beb2930f0465e3012da6b8e412b407928f665ba47feb51c9459b6416df43f900fab02b7237e5"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x84}, &(0x7f0000000380)={0x20, 0x1, 0x9a, "718442beaa5839f1b13488f686805e2b5a005d8ef12637edaeb09d16b0216347b12e492a91eb8c01ca849f7d3002179c643052f6c5c884da6109c69ab13c08681a26582811a9127de3e7c7393e4c959a6226ce42539344993d7c19baa7a1079a53052d34a088301e88adf8f69de51a840cfe5798221cacb6833c8589e42466b46982e56e75d725981d913506311e6047ac56dd82936013e7498f"}, &(0x7f0000000300)={0x20, 0x3, 0x1}}) r0 = syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000580)={0xc, &(0x7f00000004c0)={0x40, 0xd, 0xab, {0xab, 0x30, "c00edafe164a041172b75c4800b381218bab92d67c2409022696983e8f2225029bbc90fd7e487ff8fbac523250dfa6587110b21848e1c78a4aa255f155c4d3331df4143cb7c4a0f67892471d5cd100197775145ed5497f7235ce1207bfd27adfbe286396fba8cf20bf4532eb1c2d04aa5e80d1a3d5149c03e216c889217d820d9a5d9486fcaff947365200234087d08a12b03446f3c1cc21a6b5ff1a551577fbead07a264c2838e803"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x10, &(0x7f00000005c0)={0x40, 0x0, 0x91, "81d0703190c4af57c115c30ac5a36821cdf7f2717d71d6c62c3649580cb15363a5c79bdf14c07ba7f66c93e3b06d0c5947f23ddded5e99baeb06b6632c0ae026a6c3b104212a164506d3a7133453fb095497fc59ca0d6a359f84b6fe8f6be369446a8b286fe628c33ff67434da092e4bf65922c86b4ac5f2ee9766bee951720a6243ba19ac0560d024e3756429c5e9417c"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1f}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x7}}) [ 299.650142][T10137] overlayfs: "xino=on" is useless with all layers on same fs, ignore. 23:21:50 executing program 2: socket$inet6(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchown(r2, 0xee01, 0x0) fchown(r1, 0xee00, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="150000004e8ab8be528efe45d56b09a252baac4e4c7961b22e809bed88cfcb8017bbcddf189902d3a2f86ab96a673dc9f836c7381d3e458723f333f27e26d06ed67ea240", @ANYRES16=0x0, @ANYBLOB="000200000000fedbdf25120000000500c2000800000008001400", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, 0x0, 0x4049050) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) 23:21:50 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) 23:21:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000000)=""/29, &(0x7f0000000080)=""/87, &(0x7f0000000100)=""/154}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000bc0)={0x0, 0x7, &(0x7f0000000a40)=""/184, &(0x7f0000000b00)=""/15, &(0x7f0000000b40)=""/97, 0x1}) r3 = dup3(r1, r2, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r3, 0xb) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000940)={0x7, 0x0, [{0x3000, 0x8f, &(0x7f0000000400)=""/143}, {0x3000, 0x96, &(0x7f0000000540)=""/150}, {0x3000, 0xd4, &(0x7f0000000600)=""/212}, {0x4000, 0xc5, &(0x7f0000000700)=""/197}, {0x2, 0x7d, &(0x7f0000000800)=""/125}, {0x10000, 0x1d, &(0x7f00000004c0)=""/29}, {0xf000, 0x86, &(0x7f0000000880)=""/134}]}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4400}, 0x4000040) r4 = openat$dlm_control(0xffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x500301, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xa4, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xad}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ac24ae40950b2a177982740102030109021200010000000009"], 0x0) [ 300.242219][ T8434] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 300.466309][T10153] overlayfs: failed to resolve './file0': -2 [ 300.483170][ T8434] usb 2-1: Using ep0 maxpacket: 8 23:21:51 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 300.602703][ T8434] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.704108][ T8434] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 300.713553][ T8434] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 300.721778][ T8434] usb 2-1: Manufacturer: syz [ 300.786399][ T8434] usb 2-1: config 0 descriptor?? [ 300.924894][ T9303] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 301.042877][ T8434] uvcvideo: Found UVC 0.00 device (0bd3:0555) [ 301.050057][ T8434] uvcvideo 2-1:0.0: Entity type for entity 424242424242 was not initialized! [ 301.059351][ T8434] uvcvideo: Failed to create links for entity 255 [ 301.066058][ T8434] uvcvideo: Failed to register entities (-22). [ 301.247876][ T8434] usb 2-1: USB disconnect, device number 4 [ 301.363995][ T9303] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 301.371748][ T9303] usb 4-1: can't read configurations, error -61 [ 301.554088][ T9303] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 301.818045][T10163] overlayfs: failed to resolve './file0': -2 [ 301.953073][ T9303] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 301.960839][ T9303] usb 4-1: can't read configurations, error -61 23:21:52 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 302.002362][ T9303] usb usb4-port1: attempt power cycle [ 302.042421][ T55] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 302.050593][T10148] loop2: detected capacity change from 4096 to 0 [ 302.282813][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 302.345999][T10148] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 302.402791][ T55] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.494521][ T55] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 302.503844][ T55] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 302.512251][ T55] usb 2-1: Manufacturer: syz [ 302.553883][T10187] overlayfs: failed to resolve './file0': -2 [ 302.584001][ T55] usb 2-1: config 0 descriptor?? 23:21:53 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 302.736347][ T9303] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 302.863656][ T55] uvcvideo: Found UVC 0.00 device (0bd3:0555) [ 302.870886][ T55] uvcvideo: Failed to initialize entity for entity 255 [ 302.878270][ T55] uvcvideo: Failed to register entities (-22). [ 302.963152][ T55] usb 2-1: USB disconnect, device number 5 [ 303.003914][ T9303] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 303.011724][ T9303] usb 4-1: can't read configurations, error -61 23:21:53 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={'macsec0\x00', @ifru_addrs=@generic}) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x803, 0x4) shutdown(r1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x380000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x59}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000000)=""/29, &(0x7f0000000080)=""/87, &(0x7f0000000100)=""/154}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000240), 0x4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010101}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x14, &(0x7f0000000000)={r6, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000600)=ANY=[@ANYRES32=r6, @ANYBLOB="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"], &(0x7f00000000c0)=0xfb) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012080c0001006d6163767461707b4600040002800a000500040000000000000008008a00", @ANYRES32=r7, @ANYBLOB], 0x48}}, 0x0) [ 303.199417][T10201] overlayfs: failed to resolve './file0': -2 [ 303.202343][ T9303] usb 4-1: new high-speed USB device number 11 using dummy_hcd 23:21:53 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 303.464797][ T9303] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 303.472694][ T9303] usb 4-1: can't read configurations, error -61 [ 303.512673][ T9303] usb usb4-port1: unable to enumerate USB device [ 303.557559][T10204] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 23:21:54 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={'macsec0\x00', @ifru_addrs=@generic}) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x803, 0x4) shutdown(r1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x380000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x59}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000000)=""/29, &(0x7f0000000080)=""/87, &(0x7f0000000100)=""/154}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000240), 0x4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010101}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x14, &(0x7f0000000000)={r6, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000600)=ANY=[@ANYRES32=r6, @ANYBLOB="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"], &(0x7f00000000c0)=0xfb) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012080c0001006d6163767461707b4600040002800a000500040000000000000008008a00", @ANYRES32=r7, @ANYBLOB], 0x48}}, 0x0) 23:21:54 executing program 2: syz_read_part_table(0x0, 0x0, &(0x7f0000000080)) 23:21:54 executing program 3: timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f0000000180)) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_open_procfs(0x0, &(0x7f0000000100)='net/sctp\x00') getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000055000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="200001007fe3b602b881f7ad1611c4bc0dbb744eb4e01623777fa751be"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect(0x0, 0xd5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5ac8f40f60d4a00fb0d000000010902c300010000000009042b0000b6d1c40007240106d901100c240201f901ff06a5c8bbc60f2402029c0002007316ae60cb06150e24020120040620fdffdde0ea790e2402018104061f01d8a639716b7323a200957180d518f296e8b10d730b02e4607899cfbf6eb64b3ae095c90a49b9847050f0f3532e1a31e8e140eb7eadba4760bfc9425ff56201fa31cb3fdfce61dd13fe7e607198ba7e804f4896070f3f330711826eb31986c4b75852b000b839866bb30cf0365b04334f1f57fc869cfc6a3f"], 0x0) [ 304.284732][T10213] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 304.360722][T10214] overlayfs: failed to resolve './file0': -2 23:21:55 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) 23:21:55 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:21:55 executing program 2: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0xc62f98480d383858}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f00000000c0)={0x0, 0x98}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x10000, 0x94) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000240)={0xfff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000], 0x0, 0x1000}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 304.722766][ T9303] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 305.093714][ T9303] usb 4-1: config 0 has an invalid interface number: 43 but max is 0 [ 305.102222][ T9303] usb 4-1: config 0 has no interface number 0 [ 305.108473][ T9303] usb 4-1: New USB device found, idVendor=0df6, idProduct=004a, bcdDevice= d.fb [ 305.117879][ T9303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.137172][T10227] overlayfs: failed to resolve './file0': -2 [ 305.263164][ T9303] usb 4-1: config 0 descriptor?? [ 305.271005][T10232] kvm [10231]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x4000001b data 0xf 23:21:55 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 305.508802][ T9303] usb 4-1: USB disconnect, device number 12 [ 305.758879][T10249] overlayfs: failed to resolve './file1': -2 23:21:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x21, 0x6, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000060c000200080006"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010100}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x1a73d}, @IFLA_GRE_OKEY={0x8, 0x5, 0x9}, @IFLA_GRE_LINK={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240408c4}, 0x0) 23:21:56 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) 23:21:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000000)=""/29, &(0x7f0000000080)=""/87, &(0x7f0000000100)=""/154}) ioctl$RTC_VL_CLR(r0, 0x7014) syz_mount_image$hpfs(&(0x7f0000000080)='hpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x2300, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)) [ 306.256690][T10256] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 306.337088][T10258] overlayfs: failed to resolve './file1': -2 23:21:57 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 306.502743][T10296] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 306.541668][T10296] bond2 (uninitialized): Released all slaves 23:21:57 executing program 4: r0 = openat$vsock(0xffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000040)={0x1}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000000c0)={0x6, 0x0, [{0xc0000000, 0xfffffffc, 0x1, 0x1, 0x0, 0x6, 0x1}, {0xc0000001, 0x200, 0x0, 0x3, 0x3, 0x5edb5877, 0x6}, {0x80000001, 0x7f, 0x4, 0x2, 0x5, 0x2, 0x3a57}, {0x40000001, 0x1, 0x4, 0x1, 0x6, 0xfa5, 0x3}, {0x4, 0x1, 0x3, 0x83a4, 0x7fff, 0x1, 0x4}, {0x80000008, 0x4, 0x0, 0x400, 0x4, 0x5, 0x8}]}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000001c0)="ebb8f03f976b7c3a8ea5e48feb2b9501e524c2350619bfbc986fa9bb66293d01d58480bc2a16f3e010822e0e90a1f8f9cfc1da3831eb37a23a633ecf474685a6f46ad8f2c6c906cc09f487a772e1df67fff046807758949ad3d3aa8e75de3e4f80892131c304782c857152245aeaad4dc130b527a0a977a5ebe9c4eab640be42acba7fa2b76b96e6ba18f1a254900989ddf1a77097834bbd26bc70abc6cca5cf97564949755d2cec8076af56c955f6e0d9ad395a2e16a1c128328e274ad4a8f61bb14eebf6800e5c70ee5cd763d0", 0xce}, {&(0x7f00000002c0)="9a6ed2230de4803df439d6133be73ab5267e9b2cfc7b86ea7e151aec166c63896e2e67adbfb0c5c74067ad724e1eca6009f6cef74a3ce3366bb89a8fc0241428df4e76e0fbff5b046cd1d7c2e78b949b48eb51d7cdd1aeec542d19327bb28a6b7f01f78328b7cdbd446a5bafb8dc8d38e7f8af76f6011c7c8d476827c58617bf971cac83b6ef5aaba2f928d5718aba8b56fc591a8632b3fba3633f5198e013ec", 0xa0}, {&(0x7f0000000380)="47d13f8b8cd23342ff30b1b00e95b1f57d", 0x11}], 0x3) r2 = openat$pfkey(0xffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000480)={0x10000, &(0x7f0000000440), 0x2, r1, 0x9}) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000004c0)={r0, 0xf77, 0x1, r0}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000540)={r3, 0x20, 0x1ff, r2}) r4 = creat(&(0x7f0000000580)='./file0\x00', 0xf3) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f00000005c0)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) rename(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00') creat(&(0x7f00000006c0)='./file1\x00', 0xa0) open(&(0x7f0000000700)='./file2\x00', 0x0, 0xc6) r5 = openat$vicodec0(0xffffff9c, &(0x7f0000000740)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FBUF(r5, 0x402c560b, &(0x7f0000000880)={0x8, 0x0, &(0x7f0000000780)="298171e8cde3e1b59cac479ff77e5811c1141f92b37a8d8ed7482b52c2cfe60a6527a68b1852eb55bea284c9bd01eda3e1f6006ea4f7c9e6b1b2b3ae5e30a297e5a08dfa8631ea49b93ee3c8bac77ae9d24f67ad80ef55d7f5bfd451116772825e7628ce854940cbdaf267e5e93781ccb48cd8e9bc018607ae36ab54b99292145f391dc500e0aae567e4c9448c6b162c0de25c38326fac8ada190d5178e93876e0160da025bd8a75eed1255fa7ed26a0293f31e174ab5304c25e0f75bb5e188dc7b3e828ac9fc1702cc49d20c773239fdb3200c742ad637b7193326ab4bc81d61abc511e26b7af185bf4ead168f4ccdfff0db7ca9f62d044", {0x9, 0x2, 0x4f424752, 0x9, 0x100, 0x3f, 0x6, 0x8}}) sendmsg$nl_route_sched(r1, &(0x7f0000002f40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)=@delchain={0x48, 0x65, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xe, 0x10}, {0xfff1, 0xe}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x1c, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040010}, 0x20010) [ 306.575399][T10297] loop3: detected capacity change from 17 to 0 [ 306.725602][T10297] hpfs: hpfs_map_sector(): read error 23:21:57 executing program 2: ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = syz_mount_image$xfs(&(0x7f0000003100)='xfs\x00', &(0x7f0000000600)='./file0\x00', 0x4, 0x2, &(0x7f0000000540)=[{&(0x7f0000000640)="8ff0e8daeb860c90d3c500a40ab7bfabbe89c7558bd315fb7e25edb3304da78190086b26152e6b7e57fb288d155c6f377fe8b72263f62d18c92e3fc0c54665090f6918a67cea3392d68939d674f1d4d37dcebe074390d05972381e50bf500f698618ebe71595", 0x66}, {0x0, 0x0, 0x10001}], 0xc1080, &(0x7f0000003380)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x250000, 0x25) 23:21:57 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = dup3(r0, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r2, 0xb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0xa, 0xfffffffffffffff4}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0xdc, &(0x7f0000000140)=""/220, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 307.601015][T10310] loop2: detected capacity change from 256 to 0 [ 307.638532][T10309] overlayfs: failed to resolve './file1': -2 [ 307.783561][T10315] loop2: detected capacity change from 256 to 0 23:21:58 executing program 3: r0 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000080)=0x401, 0x4) r1 = fork() tkill(0x0, 0x0) move_pages(r1, 0x16, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040)=[0x0, 0x0], 0x0) 23:21:58 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) 23:21:59 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x8002000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x8, @private1={0xfc, 0x1, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000380)={0x100, {{0xa, 0x4e20, 0xdbc, @ipv4={[], [], @multicast1}, 0x4}}, {{0xa, 0x4e23, 0x3, @private1, 0x9}}}, 0x108) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1404000010efa8c68d0058b7a31b56634302000a200000000203030000006e00f7872500000000000009000109004735abf5d34f4bd275afc0a60588e29a842209a3639157dfe677e7e159fa1a9186323e"], 0xcc}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYRES32=r1, @ANYRES64=r0], 0x20}}, 0x0) timerfd_create(0x1, 0x80000) r2 = syz_mount_image$nilfs2(&(0x7f0000000600)='nilfs2\x00', &(0x7f0000000740)='\x00', 0x0, 0x4, &(0x7f0000000a00)=[{&(0x7f0000000800)="f4fd71250f911dc9da97551593262407132f265e8b469b0992c2b0accc49eb0edb9d2db559e53316312e0b8021bf0706dad6d1a0f5a5283c7b8560171ed66f8411f277f3469813e2a550f319b05583ac87cb3502954fc1bcb911357eec7b389ad3734e0f9f1c3bbbcb83b99f55837e5ed225bdb1473c5966827da50e465a7a4bb021c5a34c07e3fe4b91bf3848415338f133ddb361201caa5001188dba03b8d5fe388ac9208bd2a06e482539dbf46ea88a68fbda42a40e0e484f724c232a71b1957381a39fce34923d00c0661b71222ba319e8edca8369e259506d34e777", 0xde, 0x5}, {&(0x7f0000000780)="21afea2007ed52b66d58bcead8248325f43b83ecdb6ef1ad8274b363b9", 0x1d, 0xffffffff}, {&(0x7f0000000900)="8019237d92c94b33edf616f933d2", 0xe, 0x1}, {&(0x7f0000000940)="1446bae8ec4d19f3648131eae0c11250855d5f6e62119ed71a3a4a18e3631f9f45f58fef4dc9ffe4b6a23a0c6bb9947921ffc78db35963011f8eba5c43687dc71fdcafd4f02770d9975f37661bfdf178ab05f147016d639e1f6916c0f62cbc3afd3588453e67bad2a6f626eabdca68b6514c07fc35acdb7b8e778aec846f691f74b75d99ae851decd17b3be3461a697da06e6f6235eab4c6106736c4d2d64a26d1245f5d9b116e2f1367853738354a08e85e4787dc5f2988cadfdc7ffc", 0xbd, 0x40}], 0x4008, &(0x7f0000000a40)={[{@barrier='barrier'}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}]}) dup3(r2, r1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvfrom$inet6(r3, &(0x7f0000000280)=""/252, 0xfc, 0x0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @ipv4={[], [], @loopback}, 0x1}, 0x1c) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x3) recvmsg(r4, &(0x7f00000007c0)={&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000000540)=""/28, 0x1c}, {&(0x7f0000000640)=""/191, 0xbf}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x5}, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x5fffc, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000000)=""/29, &(0x7f0000000080)=""/87, &(0x7f0000000100)=""/154}) sendto$inet6(r5, &(0x7f0000000580)="a2dbbf95511331f2750838c2381fa50f30580787e4f3a12ba93b00853b09af12cf808cf71a0bb3286453dde452cc05a8810e81b75fc4c1f7", 0x38, 0x80, &(0x7f00000005c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @empty}, 0x6}, 0x1c) 23:21:59 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) 23:21:59 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = dup3(r0, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r2, 0xb) fsmount(r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000034fa1d0809122323e9e2010203010902120001000002000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000340)={0x18, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a504bd40eb030200c0ba0000000109021b0001000000000904000001b504b100090581"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000008c0)={0x24, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000011c0)={0x44, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000580)={0x0, 0x0, 0x10, "adfa0c66d72b04941df0c9832aaf8abe"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000180)={0xc, &(0x7f0000000080)={0x20, 0xf, 0xae, {0xae, 0xe, "feb5acf4a6f326da6d14dc0831925444cb5b0a83728e3b2f744250ecbb1cfa402e59a637a52e25277ccac0ae579e89f9a409bcd5679a76595ee86572b7a654f2334506f2696116c4317ea094bd42166b7a26ea4a876a2c7ec3dcb7c5aaf473816cc307bdc39ccab3028a411da68a958609ad07ffc1841172a4dbc503e5b1ea265820e12a40948dee67a047a5f9698bd9710f3991fbccfc845b6f3e526ea728eb8a4de6fca45c3234588b792d"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x10, &(0x7f0000000240)={0x60, 0x13, 0x87, "97742811c979b0beeae2397866229b5b18c93965e549aece105f482074d3a4e2a421705d2cd6f7370b41deb8a1507bcd1ba5df71423ea2fb01ccd33c7f9472acb2758e9c2ea4680c2750954d38234d6aa8e6c312c83791ece2281ebac3cf86d70f72585b20837c1664001a20e1287c1d7371d7b577f004bed1ba56a4ccafe107335f19e7f56848"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3e}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 23:21:59 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 309.214971][T10336] loop2: detected capacity change from 264192 to 0 23:21:59 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:22:00 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 309.513402][ T8435] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 309.783970][ T8435] usb 4-1: Using ep0 maxpacket: 8 23:22:00 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 310.105275][ T8435] usb 4-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice=e2.e9 [ 310.114794][ T8435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.123320][ T8435] usb 4-1: Product: syz [ 310.127608][ T8435] usb 4-1: Manufacturer: syz [ 310.132498][ T8435] usb 4-1: SerialNumber: syz [ 310.285337][ T8435] usb 4-1: config 0 descriptor?? [ 310.576316][T10345] IPVS: ftp: loaded support on port[0] = 21 [ 310.752419][ T8435] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 310.961001][T10337] udc-core: couldn't find an available UDC or it's busy [ 310.968245][T10337] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 311.283747][ T8435] usb 4-1: USB disconnect, device number 13 [ 311.469950][T10345] chnl_net:caif_netlink_parms(): no params data found [ 311.891523][T10513] udc-core: couldn't find an available UDC or it's busy [ 311.899348][T10513] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 311.925365][T10345] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.933902][T10345] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.943752][T10345] device bridge_slave_0 entered promiscuous mode [ 311.999181][T10345] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.006791][T10345] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.016599][T10345] device bridge_slave_1 entered promiscuous mode [ 312.178146][ T8435] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 312.223494][T10345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.304859][T10345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.382153][ T8435] usb 4-1: device descriptor read/64, error -32 [ 312.414370][ T8812] Bluetooth: hci4: command 0x0409 tx timeout [ 312.559211][T10345] team0: Port device team_slave_0 added [ 312.632205][T10345] team0: Port device team_slave_1 added [ 312.797449][T10345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.804748][T10345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.831324][T10345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.987176][T10345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.994335][T10345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.020758][T10345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.204288][T10345] device hsr_slave_0 entered promiscuous mode [ 313.227674][T10345] device hsr_slave_1 entered promiscuous mode [ 313.255557][T10345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.263363][T10345] Cannot create hsr debugfs directory [ 313.816411][T10345] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 313.876181][T10345] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 313.911691][T10345] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 313.956466][T10345] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 314.328157][T10345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.366847][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.375908][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.400045][T10345] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.430891][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.441440][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.450863][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.458402][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.473456][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.493782][ T9303] Bluetooth: hci4: command 0x041b tx timeout [ 314.501156][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.511179][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.520804][ T1980] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.528147][ T1980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.608379][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 314.619493][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 314.630622][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 314.641221][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.702584][T10345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.713534][T10345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.745237][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 314.755033][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 314.765342][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 314.775974][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 314.785407][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.795646][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 314.805168][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 314.830612][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 314.881655][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 314.889655][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 314.924032][T10345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.551130][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.561388][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.878411][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.888510][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.966083][T10345] device veth0_vlan entered promiscuous mode [ 315.990496][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 315.999660][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 316.090243][T10345] device veth1_vlan entered promiscuous mode [ 316.534930][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 316.545191][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 316.555002][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 316.565152][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 316.572649][ T5] Bluetooth: hci4: command 0x040f tx timeout [ 316.639299][T10345] device veth0_macvtap entered promiscuous mode [ 316.758072][T10345] device veth1_macvtap entered promiscuous mode [ 316.822665][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 316.832614][ T1980] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 317.018411][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 317.029183][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.039387][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 317.052442][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.062515][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 317.073195][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.083248][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 317.093973][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.108278][T10345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.118497][ T9303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 317.128834][ T9303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 317.418199][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 317.428999][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.439131][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 317.449786][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.461788][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 317.472785][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.482803][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 317.493472][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.507568][T10345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.518330][ T9303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 317.528738][ T9303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 317.941715][T10345] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.950966][T10345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.960032][T10345] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.969086][T10345] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.653079][ T55] Bluetooth: hci4: command 0x0419 tx timeout [ 318.764162][ T842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.772429][ T842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.797361][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 319.029342][T10636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.037571][T10636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.047978][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 23:22:09 executing program 3: syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @remote, {[@generic={0x0, 0xf, "8b32a1c5839bb94abee220b7b5"}, @lsrr={0x83, 0x3}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast2}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp={0x44, 0x20, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa000c0000006001010000c49f43c35e9516fa56bddc32cc35380b7f5156dcce10d39108a9b6e00266d72f3b28cd5579a0677be2f7c7b71caf25"], 0x0) 23:22:09 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) 23:22:09 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) readahead(r0, 0x1186876c, 0x81) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00') socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) gettid() pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="0001000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000d00002000000000000000000000000000000000000000000000000000c000300e0000000080000000c000400050000000400000040000580140002006d1a00003d0000000200000001800000140002000200000072ff0000080000fa9e0f0000140002009c0200000400000003000000010100000c000a0005000000000000002c000c0002000000000000000900000000000000bcbb3d0d800000000104000000000000ffffffff0000000008000700ff0f0000100001000000000007000000050000000c", @ANYRESDEC, @ANYRES16, @ANYRESOCT=r1, @ANYRESHEX=r4], 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x8810) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 23:22:09 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:22:09 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:22:10 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x3}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x38}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r4, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000001}, 0x40111) preadv(r4, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:22:10 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 320.149290][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 320.245818][T10660] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 320.264488][T10660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.272341][T10660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.289037][T10660] device bridge_slave_0 left promiscuous mode [ 320.296024][T10660] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.369134][T10660] device bridge_slave_1 left promiscuous mode [ 320.376264][T10660] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.480377][T10660] bond0: (slave bond_slave_0): Releasing backup interface 23:22:11 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 321.099320][T10660] bond0: (slave bond_slave_1): Releasing backup interface 23:22:12 executing program 3: ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f0000000000)=0x4) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[], 0x0) 23:22:12 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 322.059581][T10660] team0: Port device team_slave_0 removed [ 322.515174][ T18] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 322.715695][ T18] usb 4-1: device descriptor read/64, error 18 [ 322.797997][T10660] team0: Port device team_slave_1 removed [ 322.807075][T10660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.814853][T10660] batman_adv: batadv0: Removing interface: batadv_slave_0 23:22:13 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 322.992179][ T18] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 323.128638][T10660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.136972][T10660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.253661][ T18] usb 4-1: device descriptor read/64, error 18 [ 323.319892][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 23:22:13 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 323.372844][ T18] usb usb4-port1: attempt power cycle 23:22:14 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000000)=""/29, &(0x7f0000000080)=""/87, &(0x7f0000000100)=""/154}) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/53, 0x35}, {&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000340)=""/65, 0x41}], 0x5, 0x3, 0x9) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x9c, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x6c, 0x2, {{0x0, 0x0, 0x0, 0x3}, [@TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0x465e314b1446faa5}, @TCA_NETEM_RATE={0x14}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) 23:22:14 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) [ 324.082318][ T18] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 324.283212][ T18] usb 4-1: device descriptor read/8, error -61 23:22:14 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 324.578954][ T18] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 324.678179][T10696] overlayfs: missing 'lowerdir' [ 324.767619][ T18] usb 4-1: device descriptor read/8, error -61 [ 324.898701][ T18] usb usb4-port1: unable to enumerate USB device 23:22:15 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='rtdev=./file0,rtdev=./file0,nolargeiu,noalign,swalLoc,measure,\x00']) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3ff) syz_mount_image$xfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 325.536261][ T3119] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.542843][ T3119] ieee802154 phy1 wpan1: encryption failed: -22 23:22:16 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) [ 325.831483][T10705] xfs: Unknown parameter 'nolargeiu' 23:22:16 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000200)='./mnt\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x200000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="b3000200002c00"]) [ 325.901560][ T1058] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.033668][T10709] xfs: Unknown parameter 'nolargeiu' [ 326.492744][T10717] overlayfs: missing 'lowerdir' 23:22:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000f1dff8)={0x0, r5}) r6 = dup3(r4, r5, 0x0) signalfd(r1, &(0x7f0000000080)={[0x7, 0x8000]}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$VHOST_NET_SET_BACKEND(r6, 0xaf02, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="19000016010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x40000d0) [ 326.616050][ T1058] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 23:22:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:22:17 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) [ 327.228847][ T1058] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.549537][T10726] overlayfs: missing 'lowerdir' 23:22:18 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) dup3(0xffffffffffffffff, r3, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0xaf02, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000f1dff8)={0x0, r5}) dup3(r4, r5, 0x0) sendfile(0xffffffffffffffff, r5, &(0x7f0000000080)=0x7, 0x200) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache='fscache'}]}}) 23:22:18 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) 23:22:18 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) [ 327.887668][ T1058] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 23:22:19 executing program 3: socket$unix(0x1, 0x5, 0x0) io_setup(0x40, &(0x7f00000012c0)) r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_UIE_OFF(r0, 0x7004) r2 = shmget(0x1, 0x4000, 0x2c001880, &(0x7f000065f000/0x4000)=nil) shmat(r2, &(0x7f0000020000/0x4000)=nil, 0x5000) 23:22:19 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 23:22:20 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:22:20 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = dup3(r0, r1, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x14, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}, {&(0x7f0000010200)="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", 0x139, 0x1000}, {&(0x7f0000010400)="0200000000000000100001022e0000000200000000000000100002022e2e00000b00000000000000e00306012e6e696c6673", 0x32, 0x1400}, {&(0x7f0000010500)="f41f0000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000ff0f", 0x402, 0x1800}, {&(0x7f0000010a00)="00000000000000000000000000000000561b675f00000000561b675f00000000000000000000000000000000000000000080010000", 0x35, 0x2080}, {&(0x7f0000010b00)="01000000000000000004000000000000561b675f00000000561b675f0000000000000000000000000000000000000000ed41020000000000000000000000000001", 0x41, 0x2100}, {&(0x7f0000010c00)="00000000000000000000000000000000561b675f00000000561b675f0000000000000000000000000000000000000000008001", 0x33, 0x2380}, {&(0x7f0000010d00)="00000000000000000000000000000000561b675f00000000561b675f0000000000000000000000000000000000000000008001", 0x33, 0x2400}, {&(0x7f0000010e00)="00000000000000000000000000000000561b675f00000000561b675f0000000000000000000000000000000000000000008001", 0x33, 0x2480}, {&(0x7f0000010f00)="00000000000000000000000000000000561b675f00000000561b675f0000000000000000000000000000000000000000008001", 0x33, 0x2500}, {&(0x7f0000011000)="00000000000000000000000000000000561b675f00000000561b675f0000000000000000000000000000000000000000a48101", 0x33, 0x2580}, {&(0x7f0000011100)="01", 0x1, 0x2800}, {&(0x7f0000011200)="0000000000000000000000000000000000000000000000000100000000000000561b675f000000000c000000000000000200000000000000050000000000000004000000000000000000000000000000561b675f00000000561b675f0000000000000000000000000000000000000000008001000000000000000000000000000200000000000000030000000000000004000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000002", 0xd9, 0x28c0}, {&(0x7f0000011300)="02000000000000000000000000000000000000000000000003", 0x19, 0x2a40}, {&(0x7f0000011400)="02000000000000000000000000000000000000000000000004", 0x19, 0x2b00}, {&(0x7f0000011500)="3d0000000000000002000000000000003e000000000000000000000000000000561b675f000000000c0000000300000000000000000000000000000003", 0x3d, 0x2c00}, {&(0x7f0000011600)="f81f0000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000002000000020000000200000ff", 0x401, 0x3000}, {&(0x7f0000011b00)="05000000000000000100000000000000ffffffffffffffff000000000000000006000000000000000100000000000000ffffffffffffffff000000000000000007000000000000000100000000000000ffffffffffffffff000000000000000008000000000000000100000000000000ffffffffffffffff000000000000000009000000000000000100000000000000ffffffffffffffff00000000000000000a000000000000000100000000000000ffffffffffffffff00000000000000000b000000000000000100000000000000ffffffffffffffff", 0xd8, 0x3820}, {&(0x7f0000011c00)="53882a9490010000561b675f0000000003000000000000000000000000000000561b675f00000000561b675f0000000000000000000000000000000000000000008001000000000000000000000000000c000000000000000d000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000561b675f00000000561b675f0000000000000000000000000000000000000000008001000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000561b675f00000000561b675f00000000000000000000000000000000000000000080010000000000000000000000000007", 0x151, 0x3c00}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="b3c9f8185e2c9438e4c8b207ee75168ba87f", @ANYRES32=r1, @ANYRES32]) socket$inet(0x2, 0x3, 0x0) r3 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x24002f, &(0x7f0000001ec0)=ANY=[]) bind$packet(r2, &(0x7f0000000180)={0x11, 0xd, 0x0, 0x1, 0x3, 0x6, @random="c478a63c4847"}, 0x14) 23:22:21 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) [ 330.618504][T10771] loop3: detected capacity change from 60 to 0 [ 334.005082][T10771] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 334.015126][T10771] NILFS (loop3): unrecognized mount option "³Éø^" [ 334.874906][ T1058] device hsr_slave_0 left promiscuous mode [ 334.919494][ T1058] device hsr_slave_1 left promiscuous mode [ 334.980621][ T1058] device veth1_macvtap left promiscuous mode [ 334.986966][ T1058] device veth0_macvtap left promiscuous mode [ 334.993384][ T1058] device veth1_vlan left promiscuous mode [ 334.999279][ T1058] device veth0_vlan left promiscuous mode 23:22:29 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) 23:22:29 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on='xino=on'}]}) [ 339.071571][T10822] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 339.080728][T10822] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 342.399981][ T1058] bond0 (unregistering): Released all slaves [ 342.818498][T10831] IPVS: ftp: loaded support on port[0] = 21 [ 343.353969][T10831] chnl_net:caif_netlink_parms(): no params data found [ 343.495828][T10831] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.503264][T10831] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.512924][T10831] device bridge_slave_0 entered promiscuous mode [ 343.529812][T10831] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.537770][T10831] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.547483][T10831] device bridge_slave_1 entered promiscuous mode [ 343.600231][T10831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.619244][T10831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.665409][T10831] team0: Port device team_slave_0 added [ 343.680234][T10831] team0: Port device team_slave_1 added [ 343.719940][T10831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.727059][T10831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.753359][T10831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.771121][T10831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.778749][T10831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.805060][T10831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.856213][T10831] device hsr_slave_0 entered promiscuous mode [ 343.863938][T10831] device hsr_slave_1 entered promiscuous mode [ 343.870988][T10831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.880714][T10831] Cannot create hsr debugfs directory [ 344.097377][T10831] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.104588][T10831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.211276][T10831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.238073][ T8435] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.249682][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 344.267633][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.275951][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.296094][T10831] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.314790][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 344.324350][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.333806][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.341041][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.361128][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.370628][ T8435] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.378054][ T8435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.434196][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.445600][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.467239][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.490518][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.499907][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.521201][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.531168][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.549980][T10831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.594588][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.602583][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.633526][T10831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.732847][ T5] Bluetooth: hci4: command 0x0409 tx timeout [ 344.743456][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.753560][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 344.803679][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 344.813347][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 344.823339][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 344.832603][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 344.850276][T10831] device veth0_vlan entered promiscuous mode [ 344.878160][T10831] device veth1_vlan entered promiscuous mode [ 344.931842][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 344.941354][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 344.950955][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 344.960447][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 344.980224][T10831] device veth0_macvtap entered promiscuous mode [ 345.005175][T10831] device veth1_macvtap entered promiscuous mode [ 345.042531][T10831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 345.054381][T10831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.064581][T10831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 345.075213][T10831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.086528][T10831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 345.097249][T10831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.108601][T10831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 345.119520][T10831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.133129][T10831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.148410][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 345.157341][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 345.166886][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.176581][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.192796][T10831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 345.204911][T10831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.215422][T10831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 345.226140][T10831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.236242][T10831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 345.246880][T10831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.256954][T10831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 345.267634][T10831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.279930][T10831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.288330][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 345.299050][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 345.556616][T10627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.565210][T10627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.579163][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 345.671601][T10627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.679679][T10627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.688778][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 346.601814][ T34] audit: type=1800 audit(1617837757.079:4): pid=11063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.current" dev="sda1" ino=14164 res=0 errno=0 23:22:37 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xf8, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'wg1\x00', @multicast}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000440)={'wlan0\x00', @dev}) openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x2, 0x9, 0x9, 0x4, 0x0, 0xffffffff00000001, 0x484, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xade, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x50048, 0x800, 0x0, 0x0, 0x2fcb, 0x9, 0x1ff}, 0x0, 0xffffffffffffffff, r0, 0x8) r2 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2c0}, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'wg1\x00', @dev}) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="a5941000ffffffffe6ade0000000000018200000", @ANYRES32=r3, @ANYBLOB="00000000030007009500000000220000013308000700000018000000f8ffffef000000001f00000085000007000000003cb22970dd200fa2"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x6, 0x0, 0x6}, 0x10}, 0x78) 23:22:37 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:22:37 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) 23:22:37 executing program 3: r0 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmmsg(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000200)="c2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="0d2c57035578ad5555cbee7b4b0c86f105d5dc2f7f723a8e3ae4b9a1ee3fcf37e5d5b59585aab612c7879d8b41e7c9e85644a631b732b4db3c11b0fe3c4b294ff6b7e915fb7ed5eab52d0ab99285dcd28b18f8179eedb88a", 0x58}, {&(0x7f00000000c0)="1e43acab1a263af870b6ae896796415a67a30a03ef41e22a784a1d59401f550efab7db30f9e758434765433b8d04d53d0743000fff3676f2f455b240cd0bbf9f05e5d51ddc4b80ae66e0cdca9db6c35b89d38c078728f1f3638acdbc9309d9d57d65ae3d861c254cfbe8d38e4011cfd0aea29f46b3bd58179c260cfc92bd161108f23e8a503affeb", 0x88}, {&(0x7f0000000240)="f4789cfcec0c40b48e1e36fe2aff99e14314c3f84f041b5a932ec2628ca7da2336cc185f1474f729e722522ec2811a24fe5f57938a9c06f2fe8f6bb939c4e56834c93de216399f7b04cb141e9f1e0e0717371b101d07857d210b35ab38bcc0243f204fcebd772e0af39cff1759fccdefc4c0c095b1ffde9205d09cd6663fd1845b79824850e481f795133b3267c2d19a092bd1aa01df7564c79071ae3ac781cb54ced2a2475530260027f8949b54c9f7639037d778af4742a430207dec448002", 0xc0}, {&(0x7f0000000180)="4ecd49cf4c689939300a543dd8764ed828868346cfd71c4be93c77fe78cd16df7e6229a028fc80761b6449a4ca1b9390373666069b52562ad60f872ae1f532c944a5", 0x42}], 0x4}}], 0x2, 0x40001e4) write$binfmt_elf64(r0, 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f00000004c0)='/dev/nvme-fabrics\x00', 0x1a1001, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$TUNSETOWNER(r1, 0x400454cc, r3) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@gettaction={0x88, 0x32, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x80000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) 23:22:37 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on='xino=on'}]}) 23:22:37 executing program 5: r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000000)) sched_rr_get_interval(r0, &(0x7f0000000040)) r1 = fcntl$getown(0xffffffffffffffff, 0x9) sched_rr_get_interval(r1, &(0x7f0000000080)) tkill(r0, 0x14) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='mounts\x00') r3 = openat$mice(0xffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x8080) mq_timedsend(r3, &(0x7f0000000140)="f055abe9b9782f04694b19acff8ea8463851e2ef43a7115a4c97a35c10d1092020f05c6706fa32ff68e899ac2a41da203ea14ef118527259e049b0758d878535949edbbe6bd3c893119de55ccdcc015d9a09a743226efa60df9bc719811c07", 0x5f, 0x6, 0x0) nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) r4 = socket(0x0, 0x80000, 0x8f0) poll(&(0x7f0000000280)=[{r3, 0x244}, {r2, 0x40a2}, {r3, 0x8000}, {r4, 0x208}], 0x4, 0x81) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00', r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x44040}, 0x1) sched_rr_get_interval(r0, &(0x7f0000000480)) migrate_pages(r1, 0xc8d0, &(0x7f00000004c0)=0x101, &(0x7f0000000500)=0xfffffffffffffffc) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000540)="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") ptrace$setregs(0xd, r1, 0x8001, &(0x7f0000000640)="97b25b4ee2dc11d2b5d0bfe5a5aaffbabf15d7825a4d0d3b6b90afeb38762e83b68d94dddd9c09f1891dc1abe218c25c2c7ce352756971e452de7d2686943e2c4fd498cb9b1da11e7daeefe0376e186ceab1819e09d8e2dea3d7116322b74806f65f26b2906ca5e87c1834cda4f681b9be947b7fbecb11e2db7acd0e9593ecd2d2086571f199edc718098b87fa854483c856971986975db47509a0193b6a6d9f788f") [ 346.814437][ T5] Bluetooth: hci4: command 0x041b tx timeout [ 347.266214][T11072] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 347.275632][T11072] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 23:22:37 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x10}], 0x10}, 0x0) 23:22:38 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on='xino=on'}]}) 23:22:38 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 348.428242][T11087] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 348.437515][T11087] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 23:22:39 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001b1c0)={0x11, 0x2, &(0x7f000001af80)=@raw=[@btf_id], &(0x7f000001b000)='syzkaller\x00', 0x0, 0xd5, &(0x7f000001b040)=""/213, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:22:39 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) [ 348.892704][ T5] Bluetooth: hci4: command 0x040f tx timeout [ 349.426590][T11102] overlayfs: missing 'lowerdir' 23:22:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a4807000d00000009000e00390340d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x7000000}, 0x80) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e002403240248ff056c05001201", 0x5b}], 0x1, 0x0, 0x0, 0xc9478da2}, 0x0) [ 350.034435][T11106] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. 23:22:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x7ffd}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) 23:22:40 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:22:40 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) 23:22:40 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001b1c0)={0x0, 0x2, &(0x7f000001af80)=@raw=[@btf_id], &(0x7f000001b000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 350.773236][T11115] overlayfs: missing 'lowerdir' 23:22:41 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x240, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 350.972898][ T5] Bluetooth: hci4: command 0x0419 tx timeout [ 351.577850][T11108] IPVS: ftp: loaded support on port[0] = 21 [ 352.391467][T11108] chnl_net:caif_netlink_parms(): no params data found [ 352.652758][T11108] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.660079][T11108] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.669904][T11108] device bridge_slave_0 entered promiscuous mode [ 352.688936][T11108] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.696934][T11108] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.706717][T11108] device bridge_slave_1 entered promiscuous mode [ 352.837584][T11108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.920730][T11108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.032402][T11108] team0: Port device team_slave_0 added [ 353.068342][T11108] team0: Port device team_slave_1 added [ 353.148890][T11108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.156379][T11108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.182686][T11108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.213570][ T8434] Bluetooth: hci0: command 0x0406 tx timeout [ 353.260510][T11108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.267787][T11108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.296639][T11108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.368222][T11108] device hsr_slave_0 entered promiscuous mode [ 353.382631][T11108] device hsr_slave_1 entered promiscuous mode [ 353.400380][T11108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.408186][T11108] Cannot create hsr debugfs directory [ 353.462323][ T5] Bluetooth: hci5: command 0x0409 tx timeout [ 353.781098][T11108] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 353.824237][T11108] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 353.892648][T11108] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 353.909596][T11108] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 354.098597][T11108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.128342][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.137374][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.155525][T11108] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.169578][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.179615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.189232][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.196718][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.207166][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.231901][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.243241][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.252604][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.259881][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.278735][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.298812][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.321576][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.333115][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.350705][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 354.378652][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.389274][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.399761][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.409347][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.431100][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 354.440448][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.466448][T11108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 354.501868][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 354.509715][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 354.536183][T11108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.644116][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 354.654340][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 354.697378][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 354.706472][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.719438][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.730849][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.745319][T11108] device veth0_vlan entered promiscuous mode [ 354.767710][T11108] device veth1_vlan entered promiscuous mode [ 354.814225][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 354.823677][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 354.834431][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 354.844237][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 354.864985][T11108] device veth0_macvtap entered promiscuous mode [ 354.881396][T11108] device veth1_macvtap entered promiscuous mode [ 354.922525][T11108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 354.934483][T11108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.944639][T11108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 354.955269][T11108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.965776][T11108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 354.976906][T11108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.987049][T11108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 354.997749][T11108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.007865][T11108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 355.018514][T11108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.030765][T11108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.045920][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 355.054934][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 355.064270][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 355.074378][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 355.094077][T11108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 355.104870][T11108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.114861][T11108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 355.125591][T11108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.135681][T11108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 355.146404][T11108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.156435][T11108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 355.167062][T11108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.177097][T11108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 355.187722][T11108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.200635][T11108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.213202][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 355.223207][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 355.249722][T11108] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.258774][T11108] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.267870][T11108] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.276880][T11108] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.535586][ T8434] Bluetooth: hci5: command 0x041b tx timeout [ 355.600340][T10627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.609713][T10627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.657811][ T8434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 355.727274][T10627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.735476][T10627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.747011][ T8434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 357.613371][ T5] Bluetooth: hci5: command 0x040f tx timeout 23:22:49 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xa, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x24004019) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}, 0x0) 23:22:49 executing program 3: perf_event_open$cgroup(&(0x7f0000000800)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:22:49 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) 23:22:49 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:22:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:22:49 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 359.083626][T11388] overlayfs: missing 'lowerdir' 23:22:49 executing program 3: perf_event_open$cgroup(&(0x7f0000000800)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) 23:22:49 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000010e40)={&(0x7f0000010bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000010d40)=""/209, 0x26, 0xd1, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x7, 0xb2, &(0x7f0000000280)=""/178, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0), 0x10}, 0x78) 23:22:49 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) 23:22:50 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f000000a3c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f000000a440)='./cgroup.net/syz0\x00', 0x200002, 0x0) [ 359.692858][ T5] Bluetooth: hci5: command 0x0419 tx timeout 23:22:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007840)={&(0x7f0000007680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0xd}]}}, &(0x7f0000007740)=""/245, 0x26, 0xf5, 0x1}, 0x20) [ 360.025161][T11400] overlayfs: missing 'workdir' 23:22:50 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003c80)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000003b40)='\\', &(0x7f0000003b80)}, 0x48) 23:22:50 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) 23:22:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000500)={r1}) 23:22:51 executing program 4: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="440000002200055bd25a80648c63940d0524fc60100010400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) [ 360.982373][T11411] overlayfs: missing 'workdir' 23:22:52 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:22:52 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002340)={0x18, 0x3, &(0x7f0000001040)=@framed, &(0x7f0000001280)='syzkaller\x00', 0x7, 0xff5, &(0x7f0000000000)=""/4085, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:22:52 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:22:52 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_on='xino=on'}]}) 23:22:52 executing program 5: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x1593}, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003100)={&(0x7f0000002e40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002ec0)=""/45, 0x2d}, {&(0x7f0000002f00)=""/60, 0x3c}, {&(0x7f0000002f40)=""/33, 0x21}, {&(0x7f0000002f80)}], 0x4, &(0x7f0000003000)=""/196, 0xc4}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003140)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003200)=@bpf_ext={0x1c, 0x5, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0x6}, @jmp={0x5, 0x0, 0xa, 0x6, 0x1, 0xfffffffffffffee0, 0x4}, @map={0x18, 0x3, 0x1, 0x0, r0}], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003a80)={&(0x7f00000032c0)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}, 0x3}}, 0x10, &(0x7f00000039c0)=[{0x0}, {0x0}, {&(0x7f0000003700)="e7167fd8b592cacf9b5dac73fed4e86c939cdae72829283ccb47c882edb59c0ee7b8ae6fdf8b3b65d8aa15e9004b1c2eeb55fb82d4ceef2e45ed41694db007332eba7733310975b7b3d9fa25dd212dadeb3fc70d423d0f4c52a08c11565127e0", 0x60}, {&(0x7f0000003800)="cdbe672c2a9ba6fdf5ef502d1d34f7a18b3d24743b20467177e695fdd51a27d37382856924a3aa84beb2e8d54e88ef68daf8ac117f3530cfc219b155a123cf91d963312046b279b08aefff113b04d70ac9b62f8c6f0565966c051f8582dc647a8b669f7187fbf80e7123e7042c6b9982c4c824f873b7c60101578d6b79913f4af2ec8d0bf78065e9be350c4b21ea64fb10de4c49429dc09e16930829806c137c1b", 0xa1}, {&(0x7f00000038c0)="ceb640512c41b4670192", 0xa}, {&(0x7f0000003900)}], 0x6}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003e80)={0x0, 0x9, &(0x7f0000003d00)=@framed={{}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x80000000}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff}]}, &(0x7f0000003d80)='syzkaller\x00', 0x80000001, 0x1e, &(0x7f0000003dc0)=""/30, 0x41100, 0x2, [], 0x0, 0x0, r2, 0x8, &(0x7f0000003e00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000003e40)={0x0, 0x0, 0x6, 0x4555}, 0x10}, 0x78) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003f00)={0x0, 0xf6, 0x10}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000003f40)={r4, r5}, 0xc) openat$cgroup(0xffffffffffffffff, &(0x7f0000003f80)='syz0\x00', 0x200002, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000007640)={&(0x7f0000007440)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000075c0)=[{&(0x7f00000074c0)=""/199, 0xc7}], 0x1, &(0x7f0000007600)=""/37, 0x25}, 0x20000001) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007840)={&(0x7f0000007680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x7, [@struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x3f, [{0xe}, {0xc, 0x2, 0x2}]}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}, @const={0x3, 0x0, 0x0, 0xa, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xccdb}}]}, {0x0, [0x0, 0x0, 0x61, 0x5f, 0xe]}}, &(0x7f0000007740)=""/245, 0x73, 0xf5, 0x1}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000007900)={0x18, 0x3, &(0x7f0000003fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000004000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000007880), 0x8, 0x10, &(0x7f00000078c0)={0x3, 0x0, 0x1, 0x7}, 0x10}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000007ac0)={0x1d, 0x0, 0x0, &(0x7f00000079c0)='GPL\x00', 0x0, 0x0, &(0x7f0000007a00), 0x41000, 0x0, [], r6, 0xd, r7, 0x8, &(0x7f0000007a40)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000007a80)={0x2, 0x0, 0x101, 0x6}, 0x10, 0xffffffffffffffff, r8}, 0x78) syz_open_procfs$namespace(0x0, &(0x7f0000007f00)='ns/net\x00') 23:22:52 executing program 4: perf_event_open$cgroup(&(0x7f0000000800)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:22:53 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2, 0x540000) [ 362.639348][T11436] overlayfs: missing 'workdir' 23:22:53 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xf8, 0x0, 0x0, 0x2, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'wg1\x00', @multicast}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000440)={'wlan0\x00', @dev}) openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$kcm(0x2, 0x0, 0x2) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2c0}, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'wg1\x00', @dev}) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x6, 0x0, 0x6}, 0x10}, 0x78) 23:22:53 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007840)={&(0x7f0000007680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{}]}]}}, &(0x7f0000007740)=""/245, 0x32, 0xf5, 0x1}, 0x20) 23:22:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:22:54 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="440000002200055bd25a80648c63940d0524fc60100010400a000a00053582c137153e370248038047000000d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x20044000) [ 363.452856][ T5] Bluetooth: hci1: command 0x0406 tx timeout 23:22:54 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = shmget(0x3, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0x4) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) 23:22:56 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0xe, 0x9}, {0xffe0, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4048000) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:22:56 executing program 0: mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) 23:22:56 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) dup3(r3, r4, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:22:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f000000a840)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 23:22:56 executing program 4: r0 = shmget(0x3, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0x4) 23:22:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400009) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 23:22:56 executing program 0: r0 = getpid() perf_event_open(&(0x7f0000001980)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, r0, 0xc, 0xffffffffffffffff, 0x0) 23:22:56 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 23:22:56 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0x0) 23:22:56 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) 23:22:56 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000200)='.\x00', 0x2) 23:22:57 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x1c3440, 0x1e0) 23:22:58 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:22:58 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/220, 0xdc) 23:22:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000800)) 23:22:58 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0xc8ec2, 0x0) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x1) 23:22:58 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchmodat(r1, &(0x7f00000001c0)='./file0\x00', 0x4) 23:22:58 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 368.592924][ T34] audit: type=1804 audit(1617837779.069:5): pid=11522 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir277661521/syzkaller.9vusF5/8/file0/.pending_reads" dev="sda1" ino=14273 res=1 errno=0 23:22:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000280)='./file0\x00', r0, &(0x7f0000000400)='./file0\x00') renameat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', r0, &(0x7f0000000480)='./file0\x00') 23:22:59 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x80440, 0x0) 23:22:59 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x80440, 0x0) openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x0, 0x10) 23:22:59 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 23:23:00 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) statx(r0, &(0x7f0000000840)='./file0\x00', 0x1000, 0x80, &(0x7f0000000880)) 23:23:00 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x40, 0x103) 23:23:01 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3, 0x10390, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x6, 0x7, 0x0, 0xf652, 0x3, 0x101}, 0x0, 0xffffffffffffffff, r5, 0xb) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:01 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0xc8ec2, 0x1c0) 23:23:01 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2) 23:23:01 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f00000000c0)='.log\x00', 0x80440, 0x0) 23:23:01 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x2000, 0x80, &(0x7f0000000300)) 23:23:01 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:02 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000280)='.log\x00', 0x40, 0x0) 23:23:02 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) futimesat(r0, 0x0, 0x0) 23:23:02 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x40, 0x92) 23:23:02 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file2\x00', 0x8000, 0x0) 23:23:03 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x4) 23:23:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) accept4$inet6(r1, 0x0, &(0x7f0000000000), 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) [ 373.252566][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 23:23:04 executing program 3: r0 = socket$inet6(0x18, 0x2, 0x0) r1 = dup2(r0, r0) recvfrom$inet(r1, &(0x7f0000000180)=""/184, 0xb8, 0x0, 0x0, 0x0) 23:23:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) write$FUSE_OPEN(r1, 0x0, 0x0) 23:23:04 executing program 5: r0 = open(&(0x7f0000000180)='./file0\x00', 0x80943, 0x0) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r1, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80, 0x80800) 23:23:04 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) dup3(r3, r4, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:04 executing program 4: r0 = open(&(0x7f0000000180)='./file0\x00', 0x80943, 0x0) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$packet(r0, 0x0, 0x0, 0x0) 23:23:05 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:05 executing program 3: r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 23:23:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) clock_getres(0x4, &(0x7f0000000000)) 23:23:05 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x1, 0x0) 23:23:05 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000001340)='/dev/zero\x00', 0x0, 0x0) 23:23:06 executing program 3: select(0x40, &(0x7f0000000000)={0x2}, 0x0, 0x0, 0x0) 23:23:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000001400)="b52219e21bf2234f05965c8ca429d322feb52fccaaeb96c64275cf82c0b428f77374ef140a8263118e57894620756163a40e320285dd9890b726d7eff81f3f2f3acd7c6e1d4443a9acaed8", 0xfffffffffffffecc, 0x0, 0x0, 0x0) 23:23:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mknodat(r0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0) 23:23:06 executing program 4: renameat(0xffffffffffffffff, &(0x7f0000001680)='./file0\x00', 0xffffffffffffffff, 0x0) 23:23:06 executing program 3: socket$inet6(0x18, 0x0, 0x4) 23:23:08 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) dup3(r3, r4, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:08 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, r0) 23:23:08 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="d80000000000000001"], 0x288}, 0x0) 23:23:08 executing program 3: open(&(0x7f0000000100)='./file0/file0\x00', 0x200, 0x0) 23:23:08 executing program 0: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) 23:23:08 executing program 5: select(0x40, &(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x7}) 23:23:08 executing program 3: setitimer(0x0, &(0x7f0000000000)={{}, {0x7}}, 0x0) 23:23:08 executing program 0: setitimer(0x0, &(0x7f0000000000)={{0x100000001}, {0x7}}, 0x0) 23:23:08 executing program 4: faccessat(0xffffffffffffffff, 0x0, 0x0) 23:23:08 executing program 5: select(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0) 23:23:09 executing program 4: socketpair(0x0, 0x0, 0x3, 0x0) 23:23:10 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:10 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) statx(r0, &(0x7f0000000180)='./file0\x00', 0x2000, 0x8, &(0x7f0000000040)) 23:23:11 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:11 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0xc00, 0x4) 23:23:11 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x800, 0x15) 23:23:11 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) statx(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, &(0x7f0000000040)) 23:23:11 executing program 3: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000000)) 23:23:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000140)="e87bafd4bd1293ce14f3e2904a9b67269627657339134557574f49ddd1c4df329627daf969f9e5d45008410c16f65c7099490df9ab46d0cee1bec5db9acda777118107c76a4f5f7a297e490015efaac93de3d4fac99820d38a3ccacf78e4ded2b5b1125c44f71c558f030fe03e3542fc56d0cbf1c42176cbe563cb70f22b86518c6bc81620da2c5b93adb0d2183656b0bd", 0x91, 0x0, 0x0, 0x0) 23:23:11 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') write$P9_RCLUNK(r0, 0x0, 0x0) 23:23:11 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x10, &(0x7f0000000040)) 23:23:12 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) statx(r0, &(0x7f0000000180)='./file0\x00', 0x100, 0x0, &(0x7f0000000040)) 23:23:12 executing program 4: open$dir(&(0x7f0000000540)='./file0\x00', 0x40, 0x8) 23:23:13 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:13 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) statx(r0, &(0x7f0000000180)='./file0\x00', 0x2000, 0x200, &(0x7f0000000040)) 23:23:13 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x64041, 0x30) 23:23:13 executing program 0: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) 23:23:13 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x3b5bf983aea24585) 23:23:13 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:14 executing program 0: creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x204202, 0x112) 23:23:14 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x80000000) 23:23:14 executing program 5: pipe2(&(0x7f0000000600)={0xffffffffffffffff}, 0x800) read$eventfd(r0, &(0x7f0000000640), 0x8) 23:23:14 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$getflags(r0, 0x40a) [ 383.932401][ T8435] Bluetooth: hci2: command 0x0406 tx timeout 23:23:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='status\x00') read$FUSE(r0, 0x0, 0x0) 23:23:15 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000, 0x20, &(0x7f0000000040)) 23:23:16 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:16 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10b001, 0x6) 23:23:16 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x240100, 0x15c) 23:23:16 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x0, &(0x7f0000000040)) 23:23:16 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x100, 0x200, &(0x7f0000000040)) 23:23:16 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:17 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) statx(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x40, &(0x7f00000002c0)) 23:23:17 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x1, 0x0) write$P9_RAUTH(r0, 0x0, 0x0) 23:23:17 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x0, &(0x7f00000001c0)) 23:23:17 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2000, 0x4, &(0x7f0000000040)) [ 386.980086][ T3119] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.988016][ T3119] ieee802154 phy1 wpan1: encryption failed: -22 23:23:17 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) statx(r0, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x20, &(0x7f0000000200)) 23:23:18 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/zero\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x15) 23:23:19 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:19 executing program 4: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000009f40)={0x0, 0x0, 0x0}, 0x2) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f000000a240)={0x0, 0x0, &(0x7f000000a100)}, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f000000a400)={@cgroup, r0, 0x10}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f000000a480)='./file0\x00', 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f000001ba00)={&(0x7f000001b300)=@in={0x2, 0x0, @initdev}, 0x80, 0x0}, 0x0) 23:23:19 executing program 5: bind(0xffffffffffffff9c, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 23:23:19 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) r1 = dup(r0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="10024e210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffff000000000000000000000000000000000000000000000000000000000000000000010000000000", @ANYRES32=0x0, @ANYBLOB="fe"], 0xa0) 23:23:19 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) statx(r0, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x400, &(0x7f00000001c0)) 23:23:19 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:19 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2000, 0x7ff, &(0x7f0000000040)) 23:23:19 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) statx(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x8, &(0x7f0000000040)) 23:23:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f00000000c0)=@un=@abs={0x8}, 0x8) 23:23:20 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x8007, 0x0, 0x0) 23:23:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000000c0)={0xfffffffffffffce5, 0x2}, 0x5f) 23:23:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000000c0)=0x84) 23:23:22 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f00000000c0), 0xc) 23:23:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x0, 0x1, "91"}, 0x9) 23:23:22 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002900)=[{0x0}], 0x1}, 0x0) 23:23:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 23:23:22 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002900)=[{0x0}], 0x1}, 0x0) 23:23:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000440), &(0x7f0000000500)=0xa0) 23:23:22 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) 23:23:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 23:23:23 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f00000011c0)={0x1c, 0x1c, 0x3}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x23, &(0x7f0000000000)=0x1c00, 0xfe6a) 23:23:23 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/249, 0xf9}, 0x80) 23:23:25 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:25 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080), 0x94) 23:23:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000300)={0x0, @in, 0x1, 0x0, 0x10}, 0xa0) 23:23:25 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, &(0x7f00000000c0)='`', 0x1, 0x101, &(0x7f0000000180)=@in={0x10, 0x2}, 0x10) 23:23:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 23:23:25 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, &(0x7f00000000c0)='`', 0x1, 0x0, &(0x7f0000000180)=@in={0x10, 0x2}, 0x10) 23:23:25 executing program 0: accept4$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x28, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 23:23:25 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)=0x12) 23:23:25 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000440)=ANY=[@ANYBLOB="1c1c"], &(0x7f0000000240)=0x98) 23:23:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001640)=""/164, 0xa4}], 0x1}, 0x0) 23:23:26 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0x1}, 0x0) 23:23:27 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:27 executing program 3: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000001f40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) 23:23:27 executing program 5: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x9, 0x200) 23:23:27 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090000082505a8a4070000080001090224ffff050074980904000012070103000905010200ffe000000905820241"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$hidraw(0xffffffffffffffff, 0x0, 0x88562) ioctl$HIDIOCGRAWNAME(r1, 0x6611, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 23:23:27 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001f40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1}}]}}]}}, 0x0) [ 397.562682][T11366] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 397.583183][ T18] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 397.602733][ T8435] usb 4-1: new high-speed USB device number 20 using dummy_hcd 23:23:28 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:28 executing program 5: syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2}}]}}]}}, 0x0) [ 397.822302][ T18] usb 5-1: Using ep0 maxpacket: 32 [ 397.827928][T11366] usb 1-1: Using ep0 maxpacket: 8 [ 397.854686][ T8435] usb 4-1: Using ep0 maxpacket: 32 [ 397.954002][T11366] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 397.962667][T11366] usb 1-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 397.971536][T11366] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 397.981101][T11366] usb 1-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 397.992412][T11366] usb 1-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 398.002682][T11366] usb 1-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 398.013356][T11366] usb 1-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 398.028619][ T18] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 398.038614][ T18] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 398.051734][ T8435] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 398.243689][ T8435] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 398.254505][ T8435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.263211][ T8435] usb 4-1: Product: syz [ 398.267488][ T8435] usb 4-1: Manufacturer: syz [ 398.272320][ T8435] usb 4-1: SerialNumber: syz [ 398.280007][ T18] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 398.289422][ T18] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.297641][ T18] usb 5-1: Product: syz [ 398.301919][ T18] usb 5-1: Manufacturer: syz [ 398.306769][ T18] usb 5-1: SerialNumber: syz [ 398.313156][T11366] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 398.322418][T11366] usb 1-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 398.330550][T11366] usb 1-1: Product: syz [ 398.342581][ T55] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 398.405310][T11911] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 398.448079][T11911] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 398.514577][T11366] hub 1-1:5.0: bad descriptor, ignoring hub [ 398.520732][T11366] hub: probe of 1-1:5.0 failed with error -5 [ 398.671716][ T18] usb 5-1: USB disconnect, device number 2 [ 398.698548][ T9303] usb 4-1: USB disconnect, device number 20 [ 398.713746][ T55] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 398.723824][ T55] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.747969][T11366] usblp 1-1:5.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 398.943421][ T55] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 398.952781][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.960922][ T55] usb 6-1: Product: syz [ 398.967922][ T55] usb 6-1: Manufacturer: syz [ 398.973278][ T55] usb 6-1: SerialNumber: syz [ 399.063976][T11366] usb 1-1: USB disconnect, device number 13 [ 399.098287][T11366] usblp0: removed [ 399.290908][ T18] usb 6-1: USB disconnect, device number 2 [ 399.492435][ T9303] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 399.502675][ T8812] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 399.573308][T11366] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 399.732431][ T9303] usb 4-1: Using ep0 maxpacket: 32 [ 399.763250][ T8812] usb 5-1: Using ep0 maxpacket: 32 [ 399.832807][T11366] usb 1-1: Using ep0 maxpacket: 8 [ 399.854906][ T9303] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 399.896035][ T8812] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 399.906161][ T8812] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 399.955528][T11366] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 399.964244][T11366] usb 1-1: config 5 has too many interfaces: 255, using maximum allowed: 32 [ 399.973503][T11366] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 255 [ 399.982781][T11366] usb 1-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 399.993978][T11366] usb 1-1: config 5 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 400.004136][T11366] usb 1-1: config 5 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 400.014198][T11366] usb 1-1: config 5 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 400.043748][ T9303] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 400.053359][ T9303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.061502][ T9303] usb 4-1: Product: syz [ 400.066131][ T9303] usb 4-1: Manufacturer: syz [ 400.070853][ T9303] usb 4-1: SerialNumber: syz [ 400.104890][ T18] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 400.162765][ T8812] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 400.171996][ T8812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.180539][ T8812] usb 5-1: Product: syz [ 400.184932][ T8812] usb 5-1: Manufacturer: syz [ 400.189659][ T8812] usb 5-1: SerialNumber: syz 23:23:30 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:31 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3}}]}}]}}, 0x0) [ 400.514256][ T9303] usb 4-1: can't set config #1, error -71 [ 400.526451][ T8812] usb 5-1: can't set config #1, error -71 [ 400.534611][ T18] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 400.541013][ T9303] usb 4-1: USB disconnect, device number 21 [ 400.544538][ T18] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 23:23:31 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001e80)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) 23:23:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={0x0}}, 0x0) [ 400.552586][T11366] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 400.572915][T11366] usb 1-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 400.599083][ T8812] usb 5-1: USB disconnect, device number 3 [ 400.750857][T11366] usb 1-1: can't set config #5, error -71 [ 400.758695][ T18] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 400.768117][ T18] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.776378][ T18] usb 6-1: Product: syz [ 400.780664][ T18] usb 6-1: Manufacturer: syz [ 400.785475][ T18] usb 6-1: SerialNumber: syz [ 400.822875][T11366] usb 1-1: USB disconnect, device number 14 23:23:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002000)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002040)={'syzkaller1\x00'}) preadv(r1, &(0x7f00000023c0)=[{&(0x7f0000002080)=""/11, 0xb}], 0x1, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) [ 401.150913][ T18] usb 6-1: can't set config #1, error -71 [ 401.171864][ T18] usb 6-1: USB disconnect, device number 3 23:23:31 executing program 4: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r1, &(0x7f0000000240)="480a399c32ab30ea3917f7af6122dd16c870debc8699066778c2ada92dd370caab928eee371369025d9bea689c7b6ae55ee9733c4613e1016057da055ee591449f8ed0ef5bad5b710ca2487edb7bade6f5853634d5790979a1316a12508fcde5c67380347ca2eb31ad3d9ac2b6ef7adab5c87446db54cf613879", 0x7a, 0x24000081, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000300)={{0xa, 0x4e24, 0x7ff, @remote, 0xbcd3}, {0xa, 0x0, 0x10000, @private1, 0x6}, 0x8e29, [0x5, 0x1, 0x200, 0xffffffff, 0x1, 0x0, 0x30000, 0x10001]}, 0x5c) socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000a80)={0x14, 0x0, 0xd03}, 0x14}}, 0x0) 23:23:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="ff", 0x1, 0x2400a0d1, 0x0, 0x0) [ 401.462303][T11366] usb 4-1: new high-speed USB device number 22 using dummy_hcd 23:23:32 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 401.704264][T11366] usb 4-1: Using ep0 maxpacket: 16 [ 401.846895][T11366] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 402.043061][T11366] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 402.052423][T11366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.060567][T11366] usb 4-1: Product: syz [ 402.065043][T11366] usb 4-1: Manufacturer: syz [ 402.069753][T11366] usb 4-1: SerialNumber: syz 23:23:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) 23:23:32 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000380)={0x4, {{0xa, 0x0, 0x0, @mcast2}}}, 0x84) [ 402.741537][ T8812] usb 4-1: USB disconnect, device number 22 23:23:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) 23:23:33 executing program 4: openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) [ 403.310688][ T8812] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 403.562671][ T8812] usb 4-1: Using ep0 maxpacket: 16 [ 403.715905][ T8812] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 403.893276][ T8812] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 403.902718][ T8812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.910874][ T8812] usb 4-1: Product: syz [ 403.915314][ T8812] usb 4-1: Manufacturer: syz [ 403.920032][ T8812] usb 4-1: SerialNumber: syz [ 404.209433][ T9303] usb 4-1: USB disconnect, device number 23 23:23:34 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:34 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000340)={0x5, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 23:23:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001e80)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2000000}, 0x1c) 23:23:34 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) fork() openat$cgroup_root(0xffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) 23:23:34 executing program 3: openat$cachefiles(0xffffff9c, 0x0, 0x430004, 0x0) [ 404.413848][ T5] Bluetooth: hci3: command 0x0406 tx timeout 23:23:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x0, 0x0, "bd8b79ef2d7931e4036ca399d5b312e903ca4a43fc5578ff09d1c970f3ffb5c5091098d0a447cac1c42d689df7e5277a63709345d477fb7e08732a23fb8dc2b1", "c1022ffaf0e3c2b7250e3cc4044fc85f6db6108c9c0132779e30ab671a28af4e"}) 23:23:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x84) 23:23:35 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:35 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000016c0)=[@pktinfo={{0x20, 0x29, 0x32, {@initdev={0xfe, 0x88, [], 0x0, 0x0}, r2}}}], 0x20}}], 0x2, 0x0) 23:23:35 executing program 4: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x80400, 0x0) 23:23:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x44) 23:23:36 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000400)='.log\x00', 0x0, 0x0) 23:23:37 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:37 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000340)={0x5, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 23:23:37 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000001ec0), 0x0) 23:23:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000001a80)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @local}}, 0x5c) 23:23:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x3d8, 0x1ec, 0x1ec, 0xe0, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000140), {[{{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24}}, {{@arp={@rand_addr, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'ipvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @multicast1, 0x4}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1\x00', 'team_slave_0\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev, @remote, @broadcast, 0x4}}}], {{[], 0xbc, 0xe0}, {0x24}}}}, 0x424) 23:23:38 executing program 4: openat$cachefiles(0xffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x0, 0x0) clock_gettime(0x0, 0x0) 23:23:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0x2bcf) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/252, 0xfc}], 0x1}, 0x0) 23:23:38 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:38 executing program 3: syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x129000) 23:23:39 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) memfd_create(&(0x7f0000000240)='Nwlan\x91\xfe5\x9b\xf6\x06\x16\xa0.\x91\xc4?\x04\xe4!\xaeQ\x1fGb\xb4\xb5\x92\\\xd2\xae\x80\x13J\xb7\xc0\xe7\x06\xbe\xe2~\xfafY\x98BF\xd3\xb8^V\t\x8f\xe4\xbb\xaa\xac\x9b\xe3\bvX\x19\x1b\x9d\xe6\xf8\xf5?\x1f\xc5\xe1\xc1\xbb\x9ee\x8e,\xb6:\xc2\xd4[', 0x5) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x10000000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000200)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) dup3(r1, r2, 0x0) 23:23:39 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, &(0x7f0000000580)=@isdn, &(0x7f0000000600)=0x80) 23:23:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)='\x00', 0x1}, {&(0x7f0000000740)="dd8e30b3de2fe05dc15048df77952e6e76bffbfee1d868b91d959a1159f9babec8d2d4087a2a03610eb5fd2ee418315f888d46351c098a9f639a3fdfa5befb5af4bcbbb05ac6ee59f4196fc0f439df9a1026f4e5fc38032c57c51dc5d153b4104d0450c53760a2ea5bd60d875d66401d48144e9fbb6b25c5e2341af4e4a8d063ced39d211eab7c74e2dfcf2a52f320b56f0bc83ac013aa346dda42a8d866a9190232e060849775b34c490da9fa608611da899c01a573dc1aab1c6e74c627f79c081d5ccd0acebc569940920b5a4af46498cf40ef5bd1c62d1679847fb6b2069bee3e3ab6271061e862a9f0bd3d1ecaf4d8d1c2d45c4ce41cd6d3ecf2e833e8884cd030474aa4914ac61c30da435aa10ec742cd9cc573d2559f15e1a28bcaf23e87ec380b623c3dd9abd81afc214d913093d28c9ba1623013b64380b8884d3596fa351157234e11717279743286812e7319514ded0849d7acfb0111862af4e980088f3acd4a582e2e6b696f16533c8a88dc490c560f8e4371bf47d3e27262dded626ccae2409a09fc9220a9751b963c7064ef06c5a2069c2d08b99ab2fe146c209f4ead813c487cde32ee669f429d1e06806cc8e0228c6c4461819ee1af82ee96e096484bbad8154e1bd854c2d5a45234409eedc9803725f2b3712c2ae20b3601e3e98a74b600c152145704e448bc8192cc1eb16f50adb4549ba9571a959bfd4137f868be6ec4898a047cebac6ca6ecd6f9f01f9be604f90fa2b450a4b4fff66dd90f5a4706b056759e950b8ecf56614a523436e5ea4825503b77509636829fadc26e4a0e2500b6b205c8e07395edb295da508c9797ab8cda3ac726f447925e0b014a042c1ce8a799fd43e1881b59625f40038d1ba5b2114bc3057ac9100dfb535bb052868112ef5227bd75b7fba4c1667ba9a2e7ebca3a6d97d2ff4e3416f1312c1f9f608b915f914777798fecdeaf7c469334aaba3f75d3a350b337f2f6ad6b0ad1320040c576c71a6e09fc47f0a037aa2e3604b6df9ef78336cc396aa5082108dec00b74fcac08d2829b7e1d02c0a50dab244a8861342f2c5600dc4bf1d683c4ad7e3606c661009da852527b1cacd8cbd4fa0d324bde34a773f0b1d46443f4f356bd296aa35b935034c0abefa8638f3c1afeb619ccde6cef2314c240d5f14f898cea5df64b3088f92c358db40177787e8443a65b0a1d8d85f1bac9a67e76ff650a98d73b28f653f76aa1694ee9a1254ecee6ca9fef3e47afdee66c530d98ea4b780ef058e28cbc24de029c17a13e8e25e84cf3e9b226a695a776fe05313bbb9b8d00c535fd3bace70c0486cf62890b827a0da8a9623e5b9258fea483d55eb70b81617e02e96ee03d136706737d7e89b51727418e8436360fee517c5e25de02a47510769fc0dc30172cace8d0a7156d100ea363111129b5c16d35999389235ff3ba2d60930440671d93f6427969f857f08d8da0c2730ac2823c8a02d56ab28d6f141fb4e6479afa0dfc35c55526998493e11f3e6190960f047c5fa2b625aa4778c68eb5b6db1ff3c4f3085d7fc268be6d3bfb3b0aaa9fcc325146ca28b242ae70e743b26ae4952109709e2670925570f084a67edb34389907470f556845567a35a916ed7af665dddcbb6db5c3b558ea1e825ef8387d33c8347475381fb64f00fd6ff672f4a0642b6e761a0cecb7c6160c28249871c2d776740d004c192d6d8b5587a62a9151fc3b9e73e119fee6349fbb999d0631133531e6b7dd77146fd0d93a079da9547dd65ef485a54c201f8b5aac465dfc41d92d7302177be0ffc1d8428db06e2ef471a2702c3bfc217742066af32764e8a009d8e4b8d0cae93926d50328228dcd65393a25318b39d2f275a15dbba518d593843f1e31da36a06b5d47a16253ec943a0d9968919ffa7da577cab7f29c111617eb0a4c4ac4cf534f56452d6bec7102016baa3d7585a3c2e6d58b0e826af475fd49193d94fa21728bb38649c6aeae112237c788cec8f3fefeccd49395336030b959625401f17dae8bb404e17709df544469062cf46a012a3a962fce844116517c112de91d283fc18b62b72c21a4ff5fc16815cee116774f36ba53bc5a3c514619cf98ab1a84e0352796d08018c989f5e9bdd05910e854f41952fdf6c186fb875b7b236c056a83aa7e5cdb27", 0x600}], 0x2}}], 0x1, 0x40480c0) sendmmsg$inet(r0, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)='\x00', 0x1}], 0x1}}], 0x1, 0x60cd000) [ 409.433285][T12135] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:23:41 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:41 executing program 3: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x180000) 23:23:41 executing program 4: syz_genetlink_get_family_id$team(&(0x7f0000000680)='team\x00', 0xffffffffffffffff) 23:23:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendmmsg(r0, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="9b", 0x1}], 0x1}}], 0x1, 0x0) 23:23:41 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000340)={0x5, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 23:23:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendmmsg(r0, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="9b", 0x1}], 0x1}}], 0x1, 0x0) 23:23:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c}, 0x1c}}, 0x0) [ 411.348299][T12157] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:23:42 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000a80)={0x14, 0x0, 0xd03}, 0x14}}, 0x0) 23:23:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x100000000000088) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001880)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f00000003c0)=0x800000001, 0xffffffffffffff22) sendto$inet6(r1, 0x0, 0x0, 0x20008801, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @local}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='f', 0x1, 0x0, 0x0, 0x0) 23:23:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080), 0x10) 23:23:42 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f00000000c0)=0x1, 0x4) 23:23:44 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:44 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000180)={0xffffffffffffff5f, 0x1c, 0x2}, 0x1c) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 23:23:44 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x32, &(0x7f00000000c0)={0x0, 0x0, [], [@generic]}, 0x10) 23:23:44 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 23:23:44 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000340)={0x5, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 23:23:45 executing program 3: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3) 23:23:45 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x50, &(0x7f0000000000)={0x10001, {{0x10, 0x2}}}, 0x90) 23:23:45 executing program 4: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) fork() 23:23:45 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/125, 0x7d}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/31, 0x1f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfecc, 0x0, 0x0, 0x800e00505) shutdown(r3, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000001c00)="b426652889b178ebce91f988753e32ee65525659197452117a5d2e962fc3608386fdb450862af17c3dcaf2915a4dd93bd6511cbc9c8eaba240e3552a13f588442d8d86f43f6698bab04a9dd0503a28ee335547ff56d057ee9bd5377565bf8d35f5dff40081979e93c4cbbe6a0c73313e0797c044a695f619908341e1988996ddd4c642f8320484605a4a2a081a9b907cc1d63fc29d83b86a44395d7a35288ca69487fc6b50518510c94174ef5838474a0d8747a8b8f4adfcecb58315a07b4cf827011a8fe65afa7a30a2527acde3cfee5907eb37cb9204e747cf6acf7a5f375e5807d1145b6a7c", 0xfffffec5}], 0x1) shutdown(r4, 0x0) execve(0x0, 0x0, 0x0) 23:23:45 executing program 5: socket$inet6_sctp(0x1c, 0x3, 0x84) 23:23:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f00000001c0)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000040)={r4}, 0x8) 23:23:48 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:48 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x9, &(0x7f0000000000)={@empty, @loopback}, 0x8) 23:23:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x0, 0xffffff64, "618e332780610d305ef766941f303d82a14e3df16bfc80a541c1a28579a82229a9b749cb4e56c8dd82bd7409b025f54e66b7961672b694eb4cc9ab25e34f0032293077cf980783fb62e06ac6072a3e0c45da791b22b98699c7f8cb3aaf39e8c9c4b88e55e00834e6e2fdef6610ea720bde3494040000000000000078b787d62c84c10d794b0357370441d0c147e89cd6e5d28edd75246a6361cb7a417a79fad2c3f6f60a1552a03152f73b6115e7c697e2b81efe4b4285f43c58d892b97bd63fdde11a1648337dcdb06ff1f692ba1a8de072c6daee088df7cab19bba5ec13568aa31d6253187048b9183c33b672664ce9986abd3935bae5879699ad10dd22b49c565467f756918daa6815b84c66ae35c0937c82172aae3685ff6513bf51aa8b37408a361923ea196109eaa3611d7c72daa3334f9533c42ac36383638c599a80dd3d553a2453dd1c116a29877408a7dc50cbc57dcec55c769"}, 0x160) 23:23:48 executing program 3: r0 = fork() wait4(r0, 0x0, 0x80000000, 0x0) 23:23:48 executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c}, 0x1c) 23:23:48 executing program 4: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @remote, @val, {@ipv4}}, 0x0) 23:23:48 executing program 5: setgroups(0x4, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0x0, 0x0]) 23:23:48 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x53, &(0x7f0000000100)={0x0, {{0x10, 0x2}}, {{0x10, 0x2}}}, 0x118) 23:23:49 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:49 executing program 0: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7) 23:23:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r3, &(0x7f00000001c0)={0x10, 0x2}, 0x10) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) r5 = dup2(r3, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x105, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000000)={r6}, &(0x7f0000000080)=0x14) 23:23:49 executing program 4: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3) 23:23:50 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10004}, 0x14) 23:23:50 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000180)=ANY=[], 0x84) 23:23:50 executing program 4: semget(0x0, 0x0, 0x440) 23:23:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xe, &(0x7f0000000040), &(0x7f0000000100)=0x8) 23:23:51 executing program 4: open$dir(&(0x7f0000000180)='./file0\x00', 0x302ca, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 23:23:51 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @broadcast, @val, {@ipv6}}, 0x0) 23:23:51 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:51 executing program 0: r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2e, 0x2}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) read(r1, &(0x7f0000000640)=""/51, 0x33) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r3, 0xffff, 0x1006, &(0x7f0000000100)={0x0, 0x10000}, 0x10) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/264, 0x108}, {0x0}], 0x2}, 0x0) recvfrom$inet(r2, 0x0, 0x350, 0x0, 0x0, 0x800e004de) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/132, 0x84}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) shutdown(r2, 0x0) 23:23:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) getsockname(r0, 0x0, &(0x7f0000000440)) 23:23:52 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x32, 0x0, 0x0) 23:23:52 executing program 3: utimensat(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x0, 0x0) 23:23:53 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:53 executing program 5: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) fchown(r0, 0x0, 0x0) 23:23:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000100)="cade993cda1b48f77376a8305a686f151b3bfa791781be64e72d447d244b9232e3bb7af59bec0141f5d76508ccc09e51f30257d618402b5b2252a69e424e454f68e7cadbc61a14b588dc7994de620b6432c12a6019cc0887c3eafbada8d8a22dd471c85c5f18e68c365db7062fe812ae25e2caab30e042aff2fa599c3ac13a9239f10c29320243b64fe41e84f476c0775b6d978b4bd69a162251560bd5ac2a7f0e3209c3fc8df75ca1aa2566492548b6efc664ae544e9f6367c8225a0e29bef8", 0xfffffc18, 0x4, &(0x7f00000001c0)=@in6={0x18}, 0xc) execve(0x0, 0x0, 0x0) 23:23:53 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x8) 23:23:53 executing program 0: syz_emit_ethernet(0xbb8, &(0x7f0000000140)={@local, @random="adf2873f90bb", @val, {@ipv6}}, 0x0) 23:23:54 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @val, {@ipv6}}, 0x0) 23:23:54 executing program 0: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000100)='./file0\x00') renameat(r0, &(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffffff, 0x0) 23:23:54 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:54 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file1\x00', 0x200, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 23:23:54 executing program 5: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file1\x00', 0x200, 0x0) faccessat(r0, &(0x7f00000001c0)='./file1\x00', 0x1) 23:23:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000100)="cade993cda1b48f77376a8305a686f151b3bfa791781be64e72d447d244b9232e3bb7af59bec0141f5d76508ccc09e51f30257d618402b5b2252a69e424e454f68e7cadbc61a14b588dc7994de620b6432c12a6019cc0887c3eafbada8d8a22dd471c85c5f18e68c365db7062fe812ae25e2caab30e042aff2fa599c3ac13a9239f10c29320243b64fe41e84f476c0775b", 0x91, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000200)="4865739d196d56055d99cfbb7645da145cc19d9ba8c2c0c9f054a812a21a7ead7260998615a905941f0b4363e70793176e29e7e5b165e2c1fb4b329f93d846915b0aa42ac499dbdc2f4814030a2048cea90c99cae29ba1bc9b3b0ddb9d360bbf4a114e3cece2cf7e765e4725e70580175c6879979d871bb1bd87f86cf8f733e011dd16295517c3cacb28ab0603074c1633", 0x91, 0x0, 0x0, 0x0) 23:23:55 executing program 3: syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@random="bfb7bc3d5d91", @broadcast, @val, {@ipv6}}, 0x0) 23:23:56 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x814) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:56 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60ce68670030ff0000000000000000000000000000000000fe80000000000000000022"], 0x0) 23:23:56 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) 23:23:56 executing program 0: open$dir(&(0x7f0000000180)='./file0\x00', 0x200, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 23:23:56 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60ce68670030ff0000000000000000000000000000000000fe8000001700000000000000000000aa"], 0x0) 23:23:56 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:56 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@random="bfb7bc3d5d91", @broadcast, @val, {@ipv6}}, 0x0) 23:23:56 executing program 5: syz_emit_ethernet(0x11a, &(0x7f0000000180)={@local, @random="77d98681a871", @val, {@ipv4}}, 0x0) 23:23:57 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @broadcast, @val, {@ipv6}}, 0x0) 23:23:57 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, @val, {@ipv6}}, 0x0) 23:23:57 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0xfcf6c675d0ede42a, 0x800}, 0x1c) 23:23:57 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00', 0xffffffffffffffff) recvfrom$packet(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 23:23:58 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:58 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000002140)='/dev/video2\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000002580)={"67ff561303cdabd10139a978602f91f0"}) 23:23:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x500028}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 23:23:58 executing program 0: setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_setup(0x577f, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 23:23:58 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/connector\x00') 23:23:59 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:23:59 executing program 3: syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1, 0x0) 23:23:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x2}, 0x40) 23:23:59 executing program 4: mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, 0x0) 23:23:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) times(0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x9403, 0x5, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local={0xfe, 0x78}, @mcast1, [], [], 'macvlan0\x00', 'veth0_to_bond\x00'}, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x3, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@private2, @mcast2, [], [], 'veth1_to_bond\x00', 'rose0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) 23:23:59 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x4000, 0x0) 23:24:00 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000280)=ANY=[], 0x78) 23:24:01 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00', 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x14, r1, 0x101}, 0x14}}, 0x0) 23:24:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f000000ab80)='net/ip6_tables_matches\x00') read$usbfs(r0, &(0x7f00000000c0)=""/199, 0xc7) 23:24:01 executing program 0: socket(0x10, 0x3, 0x22) 23:24:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0xc000}}, 0x0) 23:24:02 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:02 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000000)={[{@fat=@discard='discard'}]}) 23:24:02 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000051c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 23:24:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @xdp, @can, @tipc=@id}) 23:24:02 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)) [ 432.048674][T12485] FAT-fs (loop0): bogus number of reserved sectors [ 432.055667][T12485] FAT-fs (loop0): Can't find a valid FAT filesystem 23:24:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)) 23:24:02 executing program 3: syz_io_uring_setup(0x30fc, &(0x7f00000000c0), &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f00000001c0)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) [ 432.239962][T12485] FAT-fs (loop0): bogus number of reserved sectors [ 432.249712][T12485] FAT-fs (loop0): Can't find a valid FAT filesystem 23:24:04 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0xc0}, 0x0) 23:24:04 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x86440) 23:24:04 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0xc46, &(0x7f0000000240)={0x0, 0x5466, 0x10, 0x2, 0xb8}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 23:24:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140), 0x8) 23:24:05 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80)='802.15.4 MAC\x00', r0) 23:24:05 executing program 4: syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x0, 0x8601) 23:24:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) 23:24:05 executing program 5: syz_io_uring_setup(0x608c, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 23:24:05 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000340)) 23:24:05 executing program 4: socket(0x15, 0x5, 0x4) 23:24:06 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:06 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x0, 0x0) write$nbd(r0, 0x0, 0x0) 23:24:06 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:06 executing program 0: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:24:06 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x0, 0x38414261}) 23:24:06 executing program 5: io_setup(0x9, &(0x7f0000001300)=0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000002a40)=[&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r1 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000015c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 23:24:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000002a00)={0x1b}, 0x40) 23:24:07 executing program 4: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x101001) 23:24:07 executing program 0: syz_io_uring_setup(0x608c, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0xdf}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 23:24:07 executing program 3: pipe2$9p(&(0x7f00000003c0), 0x0) 23:24:07 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000002c0)=""/129, 0x1a, 0x81, 0x1}, 0x20) 23:24:08 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80)='802.15.4 MAC\x00', r0) 23:24:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x18, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_NAT_DST={0x4}]}, 0x18}}, 0x0) 23:24:08 executing program 0: syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1, 0x4400) getresuid(0x0, &(0x7f0000000040), 0x0) 23:24:08 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:08 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000001880)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) 23:24:09 executing program 4: clock_gettime(0x0, &(0x7f0000003940)) 23:24:09 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 23:24:09 executing program 3: syz_open_dev$vcsn(&(0x7f0000001c80)='/dev/vcs#\x00', 0x54, 0xca01) 23:24:10 executing program 4: socket(0x0, 0x0, 0xffffffff) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000006a40)={0x28, 0x0, 0x0, @local}, 0x10, 0x0) 23:24:10 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x71b}, 0x40) 23:24:10 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000005840)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 23:24:11 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:11 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23:24:11 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f000000ab80)='fd\x00') 23:24:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002e40)={0x0, 0x3938700}) 23:24:11 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:11 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3, 0x0) 23:24:12 executing program 3: getrandom(&(0x7f0000000180)=""/244, 0x368cc5f410a1106b, 0x0) 23:24:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80)='802.15.4 MAC\x00', r0) 23:24:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) 23:24:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 23:24:13 executing program 4: syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) 23:24:13 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x78) 23:24:14 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:14 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, 0x0) 23:24:14 executing program 4: syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1, 0x0) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, 0x0) 23:24:14 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f000000a640)=0xffffffffffffffff, 0x4) 23:24:14 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x20, 0x84441) 23:24:14 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:15 executing program 3: syz_io_uring_complete(0x0) syz_io_uring_setup(0x307d, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 23:24:15 executing program 5: ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) 23:24:15 executing program 0: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002140)={{0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}) 23:24:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x496, 0x1}, 0x40) 23:24:16 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:24:16 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "503560ae"}, 0x0, 0x0, @fd}) 23:24:18 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:18 executing program 5: setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 23:24:18 executing program 4: syz_io_uring_setup(0x30fc, &(0x7f00000000c0), &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f00000001c0)) 23:24:18 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000440)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fc4aa36e"}}) 23:24:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x26}}, 0x0) 23:24:18 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 448.418408][ T3119] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.424978][ T3119] ieee802154 phy1 wpan1: encryption failed: -22 23:24:19 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) read(r0, 0x0, 0x0) 23:24:19 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x4400c0) 23:24:19 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f000000ab80)='net/ip6_tables_matches\x00') ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 23:24:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 23:24:19 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:19 executing program 3: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01"], 0x96}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 23:24:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x3f, 0x0}, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x7, &(0x7f0000000000), 0xfe6a) 23:24:20 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001580)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x0, [{}]}]}}}], 0x20}}], 0x1, 0x0) 23:24:20 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 450.224755][T12746] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 23:24:21 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000003000)={@hci, {0x0}, 0x0}, 0xa0) 23:24:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000008980)={0x1c}, 0x40) 23:24:22 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:22 executing program 0: r0 = eventfd2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x0, 0x0, 0x0, r0}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r0, 0x4}) 23:24:22 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:22 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000600)={0x8000000}) 23:24:22 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0x15, &(0x7f0000000180), 0x4) 23:24:22 executing program 3: syz_io_uring_setup(0x3d6f, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 23:24:23 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x101040, 0x0) 23:24:23 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)) 23:24:23 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x2556, 0x0, 0x0, 0x386}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000280)) syz_io_uring_setup(0x577f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0xee}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) 23:24:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080)='nl802154\x00', r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x60140) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0)='802.15.4 MAC\x00', r0) 23:24:24 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, &(0x7f00000002c0)=""/129, 0x2a, 0x81, 0x1}, 0x20) 23:24:24 executing program 5: io_uring_setup(0x28c1, &(0x7f0000000040)={0x0, 0x0, 0x26}) 23:24:25 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:25 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x2) 23:24:26 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:26 executing program 3: openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:24:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setrlimit(0x7, &(0x7f00000011c0)) 23:24:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000064c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 23:24:26 executing program 0: syz_io_uring_setup(0x3d6f, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000340)) 23:24:26 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sequencer(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="94"], 0x1c) 23:24:26 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f000000a640), 0x4) 23:24:26 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) 23:24:27 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) io_uring_setup(0x28c1, &(0x7f0000000040)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r0}) 23:24:27 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB='\b'], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x0, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8936, &(0x7f0000000000)) 23:24:28 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) times(0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x9403, 0x5, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local={0xfe, 0x78}, @mcast1, [], [], 'macvlan0\x00', 'veth0_to_bond\x00'}, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@private2, @mcast2, [], [], 'veth1_to_bond\x00', 'rose0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) 23:24:29 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={0x0, 0x96}}, 0x0) 23:24:29 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001b00)={0x0}, 0x20) 23:24:29 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00', 0xffffffffffffffff) recvfrom$packet(r0, &(0x7f0000000000)=""/232, 0xe8, 0x40, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 23:24:29 executing program 3: write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) 23:24:29 executing program 4: syz_io_uring_setup(0x459c, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0xc46, &(0x7f0000000240)={0x0, 0x5466}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 23:24:29 executing program 5: connect$caif(0xffffffffffffffff, 0x0, 0x0) 23:24:29 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01"], 0x96}}, 0x0) 23:24:29 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000006240)={'team0\x00'}) [ 459.674365][T12879] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 459.761607][T12884] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 23:24:30 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00', 0xffffffffffffffff) recvfrom$packet(r0, &(0x7f0000000000)=""/232, 0xe8, 0x40, 0x0, 0x0) 23:24:31 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:31 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x300, 0x0) 23:24:32 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:32 executing program 4: syz_io_uring_setup(0x459c, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0xc46, &(0x7f0000000240)={0x0, 0x5466}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 23:24:32 executing program 0: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:24:32 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) read$dsp(r0, &(0x7f0000000140)=""/182, 0xb6) 23:24:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x894c, 0x0) 23:24:32 executing program 0: ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001d00)={0x6, 'wlan0\x00'}) getresuid(&(0x7f0000000000), &(0x7f0000000040), 0x0) 23:24:32 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000040)={{0x0, 0x6}, 'port1\x00'}) 23:24:32 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x82142, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0xffff7fff) 23:24:32 executing program 5: socketpair(0x23, 0x0, 0x0, &(0x7f00000000c0)) 23:24:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:24:34 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:34 executing program 4: perf_event_open(&(0x7f000000bcc0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:24:34 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:34 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000b00)='bcache_alloc_fail\x00'}, 0x20000b50) 23:24:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d9, 0x0) 23:24:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 23:24:34 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x14, &(0x7f0000000b40)={0x0}, 0x10) 23:24:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000001d00)={0x6, 'wlan0\x00', {0x5}}) 23:24:35 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000840)='l2tp\x00', 0xffffffffffffffff) 23:24:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) 23:24:35 executing program 5: perf_event_open(&(0x7f000000bcc0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:24:36 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) [ 465.862997][ T1980] Bluetooth: hci4: command 0x0406 tx timeout 23:24:37 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)={0x2, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_ident={0x2, 0xb}]}, 0x30}}, 0x0) 23:24:37 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:37 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_alloc_da_blocks\x00'}, 0x10) 23:24:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, 0x0) 23:24:37 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) 23:24:37 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) mmap$snddsp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x0) 23:24:38 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) 23:24:38 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x6, &(0x7f0000000b40)={&(0x7f0000000b00)='bcache_alloc_fail\x00'}, 0x10) 23:24:38 executing program 0: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp1\x00', 0x44042, 0x0) 23:24:38 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) mmap$snddsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 23:24:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000043c0)={0x0, 0x0, 0x0}, 0x0) 23:24:40 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:40 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006600)='/dev/nvram\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 23:24:40 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 23:24:40 executing program 0: syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x2180) 23:24:40 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) 23:24:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8901, &(0x7f0000001d00)={0x6, 'wlan0\x00'}) 23:24:40 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000440)={0x0, 0x0, 0x0, 'queue1\x00'}) 23:24:41 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0xb, &(0x7f0000000b40)={0x0}, 0x10) 23:24:41 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, 0x0) 23:24:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x3}, {0x20}, {}, {0xe}]}) 23:24:41 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) timerfd_gettime(r0, 0x0) 23:24:42 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:42 executing program 3: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1f, 0x0) 23:24:43 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "bcacf9", 0x72}) 23:24:43 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 23:24:43 executing program 4: mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:24:43 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xe042, 0x0) 23:24:43 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x141c00, 0x0) 23:24:43 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000240)) 23:24:44 executing program 3: openat$sndseq(0xffffffffffffff9c, 0x0, 0x4200) 23:24:44 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0xc00000000000000}, &(0x7f0000000080), &(0x7f0000000100)={0x0, r0+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 23:24:44 executing program 5: socket$inet(0x2, 0xa, 0x9) [ 474.522372][T13065] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) 23:24:45 executing program 3: syz_genetlink_get_family_id$smc(&(0x7f0000000cc0)='SMC_PNETID\x00', 0xffffffffffffffff) 23:24:45 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x4000) [ 475.212277][ T9303] Bluetooth: hci0: command 0x0401 tx timeout 23:24:46 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:46 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:46 executing program 5: socket(0x1e, 0x0, 0xca0d) 23:24:46 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 23:24:46 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map, 0xffffffffffffffff, 0x11}, 0x10) 23:24:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={&(0x7f0000000140), 0xc, &(0x7f0000000700)={&(0x7f0000000180)=@allocspi={0x150, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private2, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {@in=@loopback, 0x0, 0x3c}, @in6=@ipv4={[], [], @dev}}}, [@migrate={0x50, 0x11, [{@in6=@private0, @in=@remote, @in6=@remote, @in6=@remote}]}, @proto={0x5}]}, 0x150}}, 0x0) [ 475.854706][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 476.092354][ T55] Bluetooth: hci5: command 0x0406 tx timeout 23:24:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x16, 0x4) 23:24:46 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) 23:24:46 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 23:24:46 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x23, 0x0, 0x80}, 0x10) 23:24:47 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000880)='/dev/sequencer2\x00', 0x40880, 0x0) 23:24:47 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/seq\x00', 0x201) 23:24:49 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:49 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:49 executing program 0: socket$inet6(0xa, 0x1, 0x3) 23:24:49 executing program 5: syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x36) 23:24:49 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 23:24:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, 0x0) 23:24:49 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x2}}) 23:24:49 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x8, 0x0, 0x0) 23:24:49 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/nvram\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) 23:24:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000000)={'batadv0\x00', @ifru_ivalue}) 23:24:50 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x11, r0, 0x0) 23:24:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001140)=@flushsa={0x20, 0x1c, 0x7, 0x0, 0x0, {}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x20}}, 0x0) [ 480.534028][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 480.543793][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 23:24:51 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:52 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'ip6_vti0\x00'}) 23:24:52 executing program 5: socket$inet(0x2, 0x6, 0x3) 23:24:52 executing program 3: socket(0xa, 0x3, 0x2) 23:24:52 executing program 4: getrusage(0xffffffffffffffff, &(0x7f0000001dc0)) 23:24:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) 23:24:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, @tipc=@name={0x1e, 0x2, 0x0, {{}, 0x3}}, 0xebd}) 23:24:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000400), 0x4) 23:24:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0xc0189436, 0x0) 23:24:53 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, 0x0, &(0x7f0000000140)) 23:24:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8981, &(0x7f0000001d00)={0x6, 'wlan0\x00'}) 23:24:54 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:55 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:24:55 executing program 5: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000200)) 23:24:55 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) 23:24:55 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x0) 23:24:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000001d00)={0x6, 'wlan0\x00'}) 23:24:55 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000b00)='bcache_alloc_fail\x00'}, 0x6b) 23:24:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2620, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) 23:24:55 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) getpeername(r0, 0x0, 0x0) 23:24:56 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) 23:24:56 executing program 3: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8081f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:24:57 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:57 executing program 1: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:24:57 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/nvram\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 23:24:57 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x3, 0x0, 0x49) 23:24:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000300)={'gre0\x00', @ifru_names}) 23:24:57 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_OPEN(r0, &(0x7f00000000c0)={0x20}, 0x20) 23:24:58 executing program 3: write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0) 23:24:58 executing program 5: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x0) 23:24:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454cf, 0x0) 23:24:58 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={0x0}, 0x10) getresgid(&(0x7f0000000940), &(0x7f0000000980), 0x0) 23:24:58 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x12, &(0x7f0000000b40)={0x0}, 0x10) 23:24:59 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) 23:25:00 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:00 executing program 1: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:00 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002140)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 23:25:00 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000340)) 23:25:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001580)={&(0x7f0000001280), 0xc, &(0x7f0000001540)={&(0x7f00000014c0)=@delchain={0x34, 0x65, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) 23:25:00 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)={0x2, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0xb}, @sadb_ident={0x2, 0xb}]}, 0x30}}, 0x0) 23:25:01 executing program 0: ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001d00)={0x6, 'wlan0\x00'}) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 23:25:01 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$sndseq(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x1c) 23:25:01 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 23:25:01 executing program 5: r0 = gettid() waitid(0x1, r0, 0x0, 0x2, 0x0) 23:25:02 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x1004}, 0x40) 23:25:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9}]}) 23:25:02 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:03 executing program 1: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:03 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 23:25:03 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101b00, 0x0) 23:25:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8901, 0x0) 23:25:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000005ec0)={0x0, 0x0, &(0x7f0000005dc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000005e80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}], 0x40}, 0x0) 23:25:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:25:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={0x0}}, 0x0) 23:25:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) 23:25:04 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 23:25:04 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:04 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000200)='hsw_stream_free_req\x00'}, 0x10) 23:25:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x200, 0x0, 0x200, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x3e]}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'virt_wifi0\x00', 'wg0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "a6fe"}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'macvlan0\x00', 'lo\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "55a0"}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 23:25:06 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:06 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, 0x0) 23:25:06 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x4000, 0x0) 23:25:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x200, 0x0, 0x200, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'virt_wifi0\x00', 'wg0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'macvlan0\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) 23:25:06 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={0x0}, 0x10) getresgid(&(0x7f0000000940), 0x0, 0x0) 23:25:06 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/kvm\x00', 0x0, 0x0) 23:25:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r0, 0x8920, &(0x7f0000000100)={'ipvlan1\x00', @ifru_data=0x0}) 23:25:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x5460, 0x0) 23:25:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) 23:25:07 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @nl=@unspec, @generic={0x0, "5548ba04818c4e4ac337ccc5346c"}, @l2tp={0x2, 0x0, @dev}}) 23:25:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000d00), 0x4) 23:25:09 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:09 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0xe000) 23:25:09 executing program 5: setgroups(0x1, &(0x7f0000000280)=[0xffffffffffffffff]) 23:25:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0100001a0001"], 0x16c}}, 0x0) 23:25:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000005ec0)={0x0, 0x0, &(0x7f0000005dc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000005e80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20}, 0x0) [ 499.084586][T13371] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. 23:25:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0}, 0x1, 0x0, 0x2}, 0x0) 23:25:09 executing program 4: getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) 23:25:09 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4040, 0x0) 23:25:09 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000140), 0x12) 23:25:09 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:10 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xa0) 23:25:10 executing program 3: wait4(0x0, 0x0, 0x0, &(0x7f0000000140)) 23:25:12 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:12 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 23:25:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0xc020660b, 0x0) 23:25:12 executing program 5: mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x2000400) 23:25:12 executing program 3: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffffffffffff, 0x0) 23:25:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, @tipc=@name}) 23:25:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)) 23:25:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x5450, 0x0) 23:25:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x120}}, 0x1) 23:25:12 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:13 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/seq\x00', 0x4200) 23:25:13 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) 23:25:14 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:14 executing program 5: socket(0x18, 0x0, 0x20) 23:25:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 23:25:14 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) 23:25:14 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x3, 0x0, 0x0) 23:25:15 executing program 3: syz_open_dev$audion(0x0, 0x0, 0x0) 23:25:15 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x82142, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 23:25:15 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x40a82, 0x0) 23:25:15 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000040)={{}, 'port0\x00'}) 23:25:15 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:15 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000007c0)={'syztnl1\x00', 0x0}) 23:25:15 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x517280, 0x0) 23:25:17 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8940, &(0x7f0000001d00)={0x6, 'wlan0\x00'}) 23:25:17 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'macsec0\x00', @ifru_settings={0x0, 0x0, @fr_pvc=0x0}}) 23:25:17 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x40081, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) 23:25:17 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x3}, {0x20}, {0x81}, {0x6}]}) [ 507.192750][ T34] audit: type=1326 audit(1617837917.669:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13469 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f47549 code=0x0 [ 507.279822][T13476] device veth1_macvtap left promiscuous mode 23:25:17 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040), 0x4) 23:25:17 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000640)) 23:25:18 executing program 5: r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x10) 23:25:18 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:18 executing program 0: sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x690b8908b7395d99) 23:25:18 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x5}]}) 23:25:18 executing program 4: syz_open_dev$audion(&(0x7f0000000700)='/dev/audio#\x00', 0x0, 0x101000) [ 509.858235][ T3119] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.864806][ T3119] ieee802154 phy1 wpan1: encryption failed: -22 23:25:20 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:20 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x100c0, 0x0) 23:25:20 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000040)) 23:25:20 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0xfd2d) 23:25:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x5421, &(0x7f0000001d00)={0x6, 'wlan0\x00'}) 23:25:20 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000240)) 23:25:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006600)='/dev/nvram\x00', 0x0, 0x0) getpeername$netlink(r0, 0x0, 0x0) 23:25:20 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x187041) 23:25:21 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:25:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'veth0_to_hsr\x00'}) 23:25:21 executing program 4: r0 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 23:25:23 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:23 executing program 0: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x0) 23:25:23 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0xf, 0x0, 0x0) 23:25:23 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000002140)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) 23:25:23 executing program 3: socket$inet(0x2, 0xa, 0x401) 23:25:23 executing program 3: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0xeab05d9af3907d60, 0x0) 23:25:23 executing program 0: openat$nvram(0xffffff9c, 0x0, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x101203) 23:25:23 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@cgroup, 0xffffffffffffffff, 0x7}, 0x10) 23:25:24 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:24 executing program 5: socket$inet(0x2, 0x0, 0xffff0cdc) 23:25:24 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f00000016c0)='wireguard\x00', 0xffffffffffffffff) 23:25:24 executing program 4: unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x3a0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) [ 514.400193][T13565] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 514.437535][T13565] device ipvlan2 entered promiscuous mode 23:25:26 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:26 executing program 3: add_key(&(0x7f00000002c0)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) 23:25:26 executing program 5: r0 = openat$sequencer(0xffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, 0x0) 23:25:26 executing program 0: openat$6lowpan_control(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x7ffff, 0x0) 23:25:26 executing program 4: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, 0x0) 23:25:26 executing program 3: r0 = fsopen(&(0x7f0000000140)='befs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000280)='befs\x00', 0x0, 0xffffffffffffffff) 23:25:26 executing program 4: openat$cachefiles(0xffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00', 0xffffffffffffffff) 23:25:26 executing program 0: pipe2(0x0, 0x80800) syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0xc03) set_tid_address(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0x6}]}) 23:25:27 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:27 executing program 5: getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) fork() shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x7000) 23:25:27 executing program 3: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc04c5611, 0x0) [ 516.770309][ T34] audit: type=1326 audit(1617837927.249:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13595 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f9d549 code=0x0 23:25:27 executing program 4: add_key$keyring(&(0x7f0000000700)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 23:25:29 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, 0x3, 0x1, 0x1303, 0x0, 0x0, {}, [@CTA_MARK={0x19}]}, 0x1c}}, 0x0) 23:25:29 executing program 5: openat2$dir(0xffffff9c, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x10}, 0x18) 23:25:29 executing program 3: openat$dlm_control(0xffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0xa082, 0x0) 23:25:29 executing program 4: openat$nvram(0xffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x0, 0x0) [ 518.748308][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 23:25:29 executing program 5: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000011940)='/dev/dlm-control\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x0) 23:25:29 executing program 3: openat$dlm_control(0xffffff9c, &(0x7f0000011940)='/dev/dlm-control\x00', 0x0, 0x0) 23:25:29 executing program 4: request_key(&(0x7f0000000480)='cifs.spnego\x00', 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f00000007c0)='ceph\x00', &(0x7f0000000800)={'syz', 0x0}, &(0x7f0000000840)='syz', 0xffffffffffffffff) 23:25:29 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:30 executing program 0: openat$rfkill(0xffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) 23:25:30 executing program 5: openat$dlm_control(0xffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0xa082, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) 23:25:30 executing program 3: request_key(&(0x7f00000007c0)='ceph\x00', &(0x7f0000000800)={'syz', 0x0}, &(0x7f0000000840)='syz', 0xffffffffffffffff) 23:25:31 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:31 executing program 4: r0 = openat$nvram(0xffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, 0x0, 0x0, 0xffffffffffffff9c) 23:25:31 executing program 0: openat$sequencer2(0xffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) 23:25:31 executing program 5: openat$vcsa(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001740)='nl80211\x00', 0xffffffffffffffff) 23:25:31 executing program 3: openat$dlm_control(0xffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0xb, 0x80000, 0x0, &(0x7f00000004c0)) 23:25:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg2\x00'}) 23:25:32 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x800, &(0x7f0000000040)) 23:25:32 executing program 4: r0 = getpgid(0xffffffffffffffff) r1 = gettid() r2 = gettid() clone3(&(0x7f0000000280)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2a}, &(0x7f00000000c0)=""/65, 0x41, &(0x7f0000000140)=""/202, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, r0, 0x0, 0x0, r1, 0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58) r3 = getpgid(r1) gettid() r4 = openat$dlm_control(0xffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0xa082, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc04c5611, &(0x7f0000000440)={0x8001, 0x0, 0x4, 0xe000, 0xffffffff, {0x0, 0x2710}, {0x2, 0x1, 0x1, 0x3f, 0x3f, 0x1, "5c49cfcf"}, 0x6, 0x2, @planes=&(0x7f0000000400)={0x46d4, 0x5e8d7cc3, @fd=0xffffffffffffffff, 0x1ff}, 0x8, 0x0, r4}) socketpair(0xb, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f0000000500)={0x7, 'team_slave_1\x00', {0x5}, 0x1}) r7 = openat$dlm_control(0xffffff9c, &(0x7f0000000540)='/dev/dlm-control\x00', 0x509041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000580)={0x0, r7}, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) getpgid(r3) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f00000007c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000800)=0x28) 23:25:32 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:32 executing program 3: openat$sndseq(0xffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x101203) 23:25:32 executing program 0: syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x5, 0x0) 23:25:33 executing program 5: clone3(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 23:25:34 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:34 executing program 3: openat$cachefiles(0xffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) io_cancel(0x0, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00', 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) 23:25:34 executing program 4: openat$cachefiles(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00', 0xffffffffffffffff) 23:25:34 executing program 0: keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000002c0), &(0x7f0000000300)={'enc=', 'pkcs1', ' hash=', {'sha256-ni\x00'}}, 0x0, 0x0) 23:25:34 executing program 5: keyctl$search(0xa, 0x0, &(0x7f0000000780)='blacklist\x00', 0x0, 0x0) 23:25:35 executing program 5: r0 = openat$nvram(0xffffff9c, &(0x7f00000006c0)='/dev/nvram\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 23:25:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x1, 0xb7, 0x1fd, 0x7fff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) 23:25:35 executing program 4: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$search(0xa, 0x0, &(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x0}, r0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000180)='.dead\x00', &(0x7f00000001c0)={'syz', 0x3}, r0) keyctl$instantiate_iov(0x14, r0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000280)="812cfc5a3e6adb88cc8392572660e8e616f6c89a5cd7b09dd201075d6552e20fed3fee7e1e9bb5d79f", 0x29}, {&(0x7f00000002c0)="c66349e8bd90ec68d56d12eb7933bfb8be24ff6172a984feb688212375cc90f9654728939c709db43a8bc1b1d930d8c346a034b264654a615f7b919c2d674cd146a8617f507119893c3e50efb672c51996d3055ea6d5d0c5b1f5198ed83bc209fc65b1e30246fe3dfa9568ab74fbac58157fbc38cc681506fdb0caba80a38467fb93078d2c2869eb9734a3edfc3cb71fcec05ce59b62850d3c4796bc03cc4d356ad12ef809498ad5176deff5bf1f34a8747e5d67f7e80e26999a663990fb47bf0b529ca0a5d677c2333136aef25ccfac9fa0f931325e41f4baf455a93f42e6338d7ad67d4ec1260500925ebf10dc7acdf90dde", 0xf3}, {&(0x7f00000003c0)="7703b40e19a93e5f4d9e37c90aa58c6005a1edae697a5dc4683009d4cf40dfe7a70907cacbac97212eff38dd8f73c553bd02d774d08159af9a3b29c8b90eb38104c33ed5325ff92db6497e60b080fefb4d1481190a97a47ecd458499308f8fd70de1fe3bfbbcd1fc6e5e8ca0c1f3493d2052fc62c4f1807e12a81bb537f84b1ce08255b8b55c", 0x86}, {&(0x7f0000000480)="a7e7caa394bd2853317d6d78a3833dec597075ec68aca31a6cc9f86a56151f80841e55bf3aba55e637eb12f991cc8fb18bddd0defd2e264a6b55c16688c7c620bddd729fc0be2039e41cbe21787eef5605b9ecab51c457b372b841b9ddba2414663447c67061d145de5c07edb7758b2d8075", 0x72}, {&(0x7f0000000500)="c606db4b37325b2e75054adfb1220c943ba152d75afe86a31c7e79c10b551f1c8c96f1017de387d0281f57b40dc2bf3a3ab544f0a31b4e1dc6f318daddcf0611a0c1adfb6cb3fc9d04ec07c19b11afcf047b1b619aee720460008a1c9c61709ebfec7a6caf36f1a94de27293a9cd82ed1f7b40e24e112775ef90b42d838b02349dce3cd6db1d8539be107877ef4349d368e9d11b0e17698e8d64f3b8471b7c08f9078ab2ad0f0aa50acf0e3201d1f53cdac52c56aa1ae720c8db38165824b3650f8b1b982c05a1d2cc8f98adf18eb3e1442d634501be6cdb83", 0xd9}, {&(0x7f0000000600)="3d9aab6b28d4263695e678a21c02565199c07ad8792e424aa65c2fb51a7243e326902c61d2e7df8226f2c3f084c3c09851a3536023", 0x35}], 0x7, 0x0) add_key$keyring(&(0x7f0000000680)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000c00)='cifs.spnego\x00', &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000c80)='\x00', r0) 23:25:35 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:35 executing program 0: openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) 23:25:35 executing program 5: r0 = gettid() clone3(&(0x7f0000000280)={0x102000000, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2a}, &(0x7f00000000c0)=""/65, 0x41, &(0x7f0000000140)=""/202, 0x0}, 0x58) rt_sigreturn() r1 = getpgid(r0) r2 = openat$dlm_control(0xffffff9c, 0x0, 0xa082, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc04c5611, &(0x7f0000000440)={0x8001, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x2, 0x0, 0x1, 0x3f, 0x3f, 0x1, "5c49cfcf"}, 0x6, 0x2, @planes=&(0x7f0000000400)={0x46d4, 0x5e8d7cc3, @fd, 0x1ff}, 0x8, 0x0, r2}) socketpair(0xb, 0x80000, 0x0, 0x0) openat$dlm_control(0xffffff9c, 0x0, 0x0, 0x0) getpgid(r1) 23:25:36 executing program 4: request_key(&(0x7f0000001e40)='rxrpc_s\x00', 0x0, 0x0, 0x0) 23:25:38 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:38 executing program 0: r0 = openat$sequencer(0xffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 23:25:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000002c0)=@req={0x20, &(0x7f0000000280)={'wlan0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}}) 23:25:38 executing program 5: keyctl$assume_authority(0x10, 0x0) add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 23:25:39 executing program 5: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, 0x0) 23:25:39 executing program 0: r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, 0x0) 23:25:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000200)) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x1, 0xb7, 0x1fd, 0x7fff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) 23:25:39 executing program 4: r0 = openat$nvram(0xffffff9c, &(0x7f00000006c0)='/dev/nvram\x00', 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000700)={0x28, 0x0, 0x0, @host}, 0x10) 23:25:39 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:39 executing program 5: syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) 23:25:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/16, 0x10}], 0x10000000000000e5) read(r0, &(0x7f0000000640)=""/51, 0x33) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000100)={0x0, 0xfffd}, 0x10) recvmsg(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/258, 0x102}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x2) recvfrom$inet(r1, 0x0, 0x350, 0x0, 0x0, 0x800e004de) r3 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) shutdown(r1, 0x0) 23:25:39 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000580), 0x10) 23:25:42 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:42 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/159, 0x9f}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000140)=""/46, 0x2e}], 0x7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) shutdown(r3, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000001c00)="b426652889b178ebce91f988753e32ee65525659197452117a5d2e962fc3608386fdb450862af17c3dcaf2915a4dd93bd6511cbc9c8eaba240e3552a13f588442d8d86f43f6698bab04a9dd0503a28ee335547ff56d057ee9bd5377565bf8d35f5dff40081979e93c4cbbe6a0c73313e0797c044a695f619908341e1988996ddd4c642f8320484605a4a2a081a9b907cc1d63fc29d83b86a44395d7a35288ca69487fc6b50518510c94174ef5838474a0d8747a8b8f4adfcecb58315a07b4cf827011a8fe65afa7a30a2527acde3cfee5907eb37cb922de747cf6acf7a5f375e5807d1145b6a7c", 0xc068}], 0x1) shutdown(r4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:25:42 executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000340)={@local, @random="67664597ba2a", @val, {@ipv6}}, 0x0) 23:25:42 executing program 0: setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) 23:25:42 executing program 4: clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() 23:25:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000009c0)=""/180, 0xb4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd}, 0x40002) open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/27, 0x1b}, {0x0}, {0x0}], 0x3}, 0x0) recvfrom$inet(r4, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r3, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x5f086c85b0419d50, 0x0) flock(r5, 0x40000003) shutdown(r4, 0x0) shutdown(r2, 0x0) 23:25:42 executing program 3: setitimer(0x2, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) 23:25:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000780)={0xffffffffffffffff, 0x9effffff, &(0x7f0000000740)={0x0}}, 0x0) 23:25:43 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:43 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8915, 0x0) 23:25:43 executing program 3: syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x6, 0x749203) 23:25:44 executing program 4: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='errors=remount-ro,resize,noquota,nointegrity,resize=']) [ 534.190102][T14098] JFS: Cannot determine volume size [ 534.195861][T14098] jfs: Unrecognized mount option "resize=" or missing value [ 534.314759][T14098] JFS: Cannot determine volume size [ 534.320147][T14098] jfs: Unrecognized mount option "resize=" or missing value 23:25:45 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000690001"], 0x40}}, 0x0) 23:25:45 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r0, 0x0, 0x0) 23:25:45 executing program 3: syz_mount_image$vxfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 23:25:45 executing program 4: syz_mount_image$vxfs(&(0x7f0000000100)='vxfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)) fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 23:25:45 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 23:25:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 23:25:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000002c80)='timers\x00') read$FUSE(r0, 0x0, 0x0) 23:25:46 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {&(0x7f0000002840)="8e", 0x1}], 0x2}}], 0x1, 0x0) 23:25:46 executing program 0: getitimer(0x862c0dd4421372f6, 0x0) 23:25:46 executing program 5: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000140)='0\x00', 0x2) 23:25:48 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380)='NLBL_CIPSOv4\x00', r0) 23:25:48 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)) 23:25:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@getlink={0x28, 0x12, 0x413, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x3}]}, 0x28}}, 0x0) 23:25:48 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x203, 0x0) [ 537.950736][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 23:25:48 executing program 4: r0 = socket(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x8000000020000001, 0x84) dup2(r1, r0) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x1c2) 23:25:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="19000000690001"], 0x40}}, 0x0) 23:25:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18}, 0x18) [ 538.630393][T14164] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:49 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:49 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 23:25:49 executing program 4: syz_mount_image$jfs(&(0x7f0000001500)='jfs\x00', &(0x7f0000001540)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0x0, &(0x7f0000000140)={[{@nodiscard='nodiscard'}, {@discard='discard'}, {@nointegrity='nointegrity'}, {@resize_size={'resize', 0x3d, 0xfffffffffffffffe}}]}) 23:25:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) [ 539.362938][T14172] JFS: discard option not supported on device 23:25:51 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:51 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) sendmmsg(r0, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000005680)=ANY=[], 0x198}}], 0x1, 0x4000) 23:25:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001200130400000000000000000400000039af"], 0x40}}, 0x0) 23:25:51 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000019c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$P9_RSTATu(r0, 0x0, 0x62) 23:25:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@getlink={0x28, 0x12, 0x413, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 540.927576][T14189] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 23:25:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@bridge_dellink={0x20, 0x11, 0x1}, 0x20}}, 0x0) 23:25:51 executing program 0: syz_mount_image$jfs(&(0x7f0000001500)='jfs\x00', &(0x7f0000001540)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0x5c000000, &(0x7f0000002980)) 23:25:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000120013030000000000f6ff0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001d000000000004002b8014"], 0x40}}, 0x0) [ 541.796763][T14200] Mount JFS Failure: -22 [ 541.801336][T14200] jfs_mount failed w/return code = -22 [ 541.928922][T14200] Mount JFS Failure: -22 [ 541.934055][T14200] jfs_mount failed w/return code = -22 23:25:52 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:52 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) 23:25:52 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f000000a080)) 23:25:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) 23:25:53 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:53 executing program 4: perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:25:53 executing program 3: bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0xfffffe15) 23:25:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) recvmsg(r0, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x0) 23:25:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@getlink={0x20, 0x10, 0x413, 0x0, 0x0, {0x4}}, 0x20}}, 0x0) 23:25:54 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000140)='logon\x00', &(0x7f0000000200)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000240)={0x0, "831db000209757e5469f9e2ed5d716b8d1bdfc1af72934f2e7c4ed3daa1213dfdc6cd9144fb78ba671ee971138e4ef19b554b3f452619876717721c7b7d690ad"}, 0x48, r0) keyctl$get_persistent(0x16, 0xee00, r1) 23:25:54 executing program 0: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='errors=remount-ro,resize,noquota,nointegrity,resize=0']) 23:25:54 executing program 3: syz_mount_image$jfs(&(0x7f0000001500)='jfs\x00', &(0x7f0000001540)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0xc203, &(0x7f0000002980)) [ 544.536054][T14243] JFS: Cannot determine volume size [ 544.544080][T14243] Mount JFS Failure: -22 [ 544.548479][T14243] jfs_mount failed w/return code = -22 [ 544.703190][T14243] JFS: Cannot determine volume size [ 544.725705][T14243] Mount JFS Failure: -22 [ 544.730119][T14243] jfs_mount failed w/return code = -22 [ 544.751094][T14247] Mount JFS Failure: -22 [ 544.877127][T14247] Mount JFS Failure: -22 23:25:55 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:55 executing program 4: r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 23:25:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@getlink={0x20, 0x73, 0x413}, 0x20}}, 0x0) 23:25:55 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000006780)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) 23:25:56 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:56 executing program 3: syz_mount_image$jfs(&(0x7f0000001500)='jfs\x00', &(0x7f0000001540)='./file0\x00', 0x0, 0x0, 0x0, 0x80021, &(0x7f0000002980)) 23:25:56 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x5411, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast2}, 'batadv_slave_1\x00'}) 23:25:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@getlink={0x28, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0xc}]}, 0x28}}, 0x0) 23:25:56 executing program 0: syz_mount_image$jfs(&(0x7f0000001500)='jfs\x00', &(0x7f0000001540)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0x0, &(0x7f0000000140)={[{@resize_size={'resize'}}]}) 23:25:56 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 546.188697][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:25:56 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 546.241532][T14279] Mount JFS Failure: -22 [ 546.246102][T14279] jfs_mount failed w/return code = -22 [ 546.310857][T14279] Mount JFS Failure: -22 [ 546.315485][T14279] jfs_mount failed w/return code = -22 23:25:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) 23:25:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@getlink={0x30, 0x10, 0x413, 0x0, 0x0, {0x4}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}}, 0x0) 23:25:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@getlink={0x10, 0x12, 0x413, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8}, @IFLA_XDP={0x4}, @IFLA_IFALIAS={0x14, 0x14, 'ip6gre0\x00'}]}, 0x40}}, 0x0) 23:25:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(r0, 0x84, 0x0, 0x0, 0x0) 23:25:57 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 547.292464][ T1980] Bluetooth: hci5: command 0x0405 tx timeout 23:25:58 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@getlink={0x20, 0x10, 0x413}, 0x20}}, 0x0) 23:25:58 executing program 3: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000780)={0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0}, 0x8}, 0x0) 23:25:58 executing program 4: socketpair(0x24, 0x0, 0x0, &(0x7f0000000100)) 23:25:58 executing program 5: syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_targets\x00') 23:25:58 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:25:59 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000740)={0x7, 'syzkaller1\x00'}) 23:25:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@getlink={0x28, 0x11, 0x413, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x4}]}, 0x28}}, 0x0) 23:25:59 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) 23:25:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x541b, 0x0) 23:25:59 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 549.131413][T14332] netlink: 'syz-executor.3': attribute type 19 has an invalid length. 23:25:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x60800) read(r1, 0x0, 0x6c00) 23:26:00 executing program 4: syz_mount_image$hfsplus(&(0x7f00000001c0)='hfsplus\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f00000019c0)) 23:26:00 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:00 executing program 0: syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp\x00') 23:26:00 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:26:00 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:00 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000180)={0x0, "09eb42dd40965db4951f96b6d72230dacba4cc0ad63306b90c039a031d4cbf9489a3c615f61dfb3409a45de1e9716d8a49ad7af420e9aec1468229fd785d6493"}, 0x48, 0xfffffffffffffffc) request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='/\x00', r0) 23:26:01 executing program 5: syz_open_procfs(0x0, &(0x7f0000002c80)='oom_adj\x00') bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:26:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@getlink={0x34, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_hsr\x00'}]}, 0x34}}, 0x0) 23:26:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000002c40)='/', 0x1}], 0x3}}], 0x1, 0x0) 23:26:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 23:26:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40) 23:26:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@getlink={0x20, 0x73, 0x413, 0x0, 0x0, {0x4}}, 0x20}}, 0x0) 23:26:02 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000180)={0x0, "09eb42dd40965db4951f96b6d72230dacba4cc0ad63306b90c039a031d4cbf9489a3c615f61dfb3409a45de1e9716d8a49ad7af420e9aec1468229fd785d6493"}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, r1) 23:26:03 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0xa, 0x4e1f, 0x0, @empty}, 0x1c, 0x0}, 0x0) 23:26:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x89a0, &(0x7f0000000280)={{0x2f, 0x0, @empty}, {0x0, @local}}) 23:26:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x89a0, &(0x7f0000000280)={{0x3a, 0x0, @empty}, {0x0, @local}}) 23:26:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@getlink={0x20, 0x29, 0x413}, 0x20}}, 0x0) 23:26:03 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:04 executing program 3: syz_mount_image$jfs(&(0x7f0000001500)='jfs\x00', &(0x7f0000001540)='./file0\x00', 0x0, 0x1, &(0x7f0000002900)=[{0x0, 0x0, 0x10000}], 0x0, &(0x7f0000002980)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}]}) getegid() r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000280)="6f0d07f5f03b39f95da762839a70ad8957374663531d975323fb67793b6d2284341cd2d840553d89638d12af0ea29d2b7dae79c4c135b2b4d83997d03cb8048ebc6d60cba030cf8b03ed07ab44509750d89b7d7e2a5ccf0f5a0d2a3e6821bcd3217b5c2ce3d75370a894597925b03a20f4e01a1815fec8cde75ad42cce5173e70dc363fd7bb2a4ba1e9c6e53aa461acf65aa8694a515b824a65159e552861b7660d69be722daf4b2fec01aee9daf1b0ec6e1e166e348a1a3a54c7fb08e823e4771d516dde3c157bd163ee1cdd7dcca6427f935855de24e55a6c1f2ce4e7bfb6d38d408d18677819a06717ec2c11a117a14d0eed0a750fc96e0c4ced24635ec6969042fc35d7d20b2d6df89f7bb3b043111381dfbf4e3b39bb2985f46820d5ec9471aeaeac22cb4cd0f5fb06ccf77911b960a1755cc6e86a8440d89bcb275937042a57102e084cd0cc7bef3f82265c5141512541dc657120c07732773afaecb80f8144d1953904a686c52e709b45dc4b0e087fc36d7048a98a174e14036159df40b38ba2d789c119331f09879bcf94a06d9a9544619d5e728791db67bab6906923910c67b86c396ff466b46b0e7a4dfa7b81b256a3ee18ae006d0f7d7eadc2b58d418116fe1b9eace5afb18f485ac65271bf4151f184c03d1fc5f74020ccd86992ef9d389c10f7da362064a0362507f9a935e94169b1a31e00f8e530b7a44d2a4b5364c09c0cf34d98e37d73754339269df5882797b3c6cc0297f027089e0197f106fb8bb90c07edd414c6237981733e3e1bca83fed0be67de561fbcb07e58f15a173275725860b59517f950187df0a54e5dd0c5223c7837c45de35e768815035211c074558ff5070b369f7c1e45c3823b83e78a137ebe46d63d4cc2276d6e2f9cdb2603c8c158eee26b324f0e2d3401aa285fc7c622a50eaccc8c0d432c08706743a75f576e961ea1581c8facb43badf2eb78ef0d856d3f10d70aaaed1a478012315480841925132755f4a1d8824fd1f39ef31276daa87d1292e28e745f89372eb7ff190d1bd06216d6ab31f49269cec44b58d799f7a3423f4bcec9c897dc7e0712e45b7f090cd2fa1297df0ba96539985979d2f526273d9260de765b9927b033ef535663ad3fa82ff0b4cd94d5344407946f5169dde15249f331bb0b294856cb8ea8e2fb76fa5edee6423bde5185fa3e68f44cea7221cec1d1f51db367348745914a169cf43795a5bced6f0226db2626d3e17fc280c9b030913b079cf42267f3ea2293acdecb8f4cc14409b9a07f27804e4082caa12bdd3fbaf70d766754483c01487dc00303718a9bfc0e339f7d49d19c8573b4c89f5695e3cf577a997c4b2f37bd1e28022bf3f43f5795e0c965458881f4b200dcc2af2a7569f803225190958f41caac47f3eb8c2c1a8e4e08fff6d1c3fc50b66b8e5803e23e65f894fb9d6fd0a31133c357a7a8f3a6cd44169257ffb969884997a70d300980167cde5ef27b197067fe93c30ced53e016d121fb996f754144eb33ea4f6e2740e59a7d3ed73394dcfb6261a81782be9377d01322e18ca4d012949e84fb47b416f9e01b7bd15d93299049edbfbab23f557a50fc9dd28ccdb8d1ca63c04a3d95e3f5fd13cecc3d126faa8bca6eadc506c4a49910226083ce7e11745b4699e55c8df4781291d93ec2b3b2db2b66b0f5290b0f7b671ca2960cc66aaa384ac7cf7dea729648a2cf6b9200db03b9dfaa9d355fed9d4e1ba7cf16c1d09ce659022140f17f034ee90210be95cd8359bba51a6cc4781547340bb8e55707fd5156a0a818295daa4689673a791343bf4c8a3fa01071eb1a2432ee78d8cfa096a102787eb39e83e78b96a4895439fda16eaade5324ab6898cca052816e3bf7429700d59fdfd254765a591a416e9e5e60bb95f12619593577f44c03128c7c66f315a3d76341886c1fbc812a0471005f1b91617f0def9322a35545142ad7761eb6612b521b80b5b11378acc1c1d0241c8f0a1bf03ae26388cb2167c660ac63c9786d2cb89106b1dfddd166edef2ca169986eba258037985c560e0cd032331fae34fcfa3892fa36be76bfee5233e013636ee1dde084acdcfca9617ec9a34d11d35bcd6a103bd83cfcd1bfb61f91f1ba7ebf587595d3754abb2f726679406131606ebf36fb50017a3adf799f600cf163171af0c2e13ca4266cfd27905af3bfecd81c5ea320137f67fc84867f622635f6f7b2b294f6a7d6497f4d5cc12f368e063ada641dd553cd1cbe8afa5d35d1c338d83f36728d01aa5e206d76412aee4dbf44c9ff03a9e3547f51ca6391abd3b59db03a5acd4ccb0a0ecc82a20480e36e0959e6c2ae91889e060000f247c02d9b3f64b2797e08b5fba796d30f121c4703250f5069497a178bc7fe060a089b6b3d97d62b2084af77347e91e2f0c2f392cf3f36081d5a01d9a7318877c1df6a736bd3698bf4a7ac77f86497ab04827b1ffcc1edd73f2c0b8678a2da10683dbbdc02f79d9dca6b3f17008cc60cf42039de00132eca05f26af25169c2cdb15ba54bf4240c9bd5702c146b10e591ec1c357cd36c1d5f65c8825f2716bcb59ff6fbfd049ae091ebf93055736cf54aa03e3e88e81683de0bb4c63799454cbe365ee1ddcc4b999486092842284531f5bef6062b28db262995d72aa52b07f866e6dd8ba401816e91542eb3ca654f89860d521a84936634513cc33bf0599df64829569de52d6baac891a0f1c623f6aeccb144d93e698281fbb35f0de898501de13c29637ae56195caf66a6f9370b14ff2420d1b17e7a49afbdf07f7e0ffa08e4e741ac774931e5ad7699c67f17cd9d4ddccd60a31e98a89dab756c33d3da9881057d6445b441940e7f32f66fdea016e0b783eae584fdc600aba830c35d8d05aa763e21f567f69ab8d842b82928abdbfd0da818de85b925909860e03165b1987a5804e50158046caff2d565d3f3c13c02e24599a490ed7f6bdfc0c351882603eb4f0bfc0203356c5dc53a1983b825474cf24bfaf530f3cba48cb816939bc5314bb952f03078e4ff626fc7713decb8805100741c13b80d99dcd347442333251c41ff56f78407b8b18f6f6336b0249d8eb4319488d1beb68361ed676f4ced2d2719919f726ac6731c1b87e3050b836b8bd84326707a13a2a2b84de904dc402d28bb383fdd0d0b597dee5b91bd2f1ffbc233053050e357decf51d760b14f5f77cdac7258d0395714e3d0348c00cbed4c48c9722741d57805369aa316d46e2c5e807680403a9ebf01607909f69fa30b46ac35b6a6774de95b571c8e7860529c4032581b034f4f9bbb52e4db132760b8ae2c49c37fb5e4cd77e1e0a1b38dcc5d21624286be035ad30ac65b1293b133595586d32e52a8dc0335220cbdebe93e9a54522261ac9fb93771bc88fb8f795c44aa1f500d7ca9bd6639baf5bff8ec63af5884d9507033ec5d6716b89b674c9c590379c644e23e85056ff6924abbc7b0457968711a20b26596784fccc180eb91d0414d8309f20125f879d6b579fa8e58bc03f2fa461be0b092298cb8fb3826aa3139c588905ae726436e9f91ba8f51c3c9fe6044c86e0ea2b9128a596be67c148fc96499c1bfebb7d17f349e06246a8951ef2a5b8b095fef2c9161e50149100c7a405da59652f2b81808b11d698874af9d132b9377621dc17fcf08ceb654f77720398e0f267ba76ee74358fe594746fb3b503032c628c46a256285601398226c6d740119c670a488579a0a720442570ec05ffffd1250480fd39eeefa4f751512ea76525fcb7a8a24735c0154e9dcc0de0edd257754f27e02c2d3e9acca24cbe024eb5b671fea14c3dadcd3f6785eb8d5c25cefc9d141e541bb72cdbbcd643f80d68dc55bbc1415e358621cdc84d8138757018c06d6fa227a09f7dc467cea377a113c55f26e622f99be2c065fff405b59d04d7bc4df87deefdff5fd0ef4f140756057b391d95040cd583c7378c0db336a42b7e3f638342ab22bed9bbc820b30edf4ddc76e82fc837292cf4aaece05265039a2fb96e4745ffe1195f70caf26b793ab604630c4c74575a04e21df2e67a457eeede60067f7b4fe82ca148c8a5a1334478319a35908fd3c6f5bfd2877e7064fcaedeb825a000e638ab8131368a3e662556c94b5a4899d326a2bba7c73afc8b1521dcf6d631bc926e0c641dc68113c798d3b26e8f60ad74c79a3b38b6058f12901872de1252244e8cda137e5892991122b49301d1b7a1ee977dd7f8aa6b7a2dad428b027085cce4c5414eb186bfd3458327652998380b788b4c3ed9b3e694de6d29516a662a24f8c01d4e4a1c64cdcb45d4a14bfa61d0de45ed58848cabca186eec9c9cdb18bb5d745a70935f9ac6d03ab8f3bede83a59222c01a214b61064edf0e7d80e8a62ad169c1e8745e7f5b0578afe2b8bf0cc9aa26cb027b19b00e981920ba50f9fd369fe872ba78cc5ab7c33215386a7c053ae867eb6681ab1f4e4642371dfa5acb9f82acdd040fe7287f4818f279282d44cb8276c3bd67c9bdd53847680000b17c24b1c0173f970d06b27e8ebe12cf5e80a89b06939c59b23af0c78c9bd6ded10bb74fcaeff04c62383c45e9e03a1f452c9aa9c82d8133b27e03852712a47426d648af28765d8ce00bcc98d5027877ba2928142a95569d4f42cdc433557eda78b0183795c9d70b8c00a4972d12dfc359077662a68d4cb5c007f229f114c13e6008c5fc8572c9155ac093c7713b42486e1c76e0e3962848d0d0c33c405389611e70bb4631908481ffeed8a762945d94771b9fc6c42a27e8786424f80a505c20b13cfbb7a986abf1ca3db764ad8459d7e5fdfa1c23bfba36868f816beea0449bfdcea06d9741973ea26e2e2d942ebe061a2302b8af9187e0f0398d82d248bbd77f6334bcabd634785a35371fee4bdb1c4d35d37eb6b225228d874c216d6d1e194ed9c090c7b7ec64ff636e353fbe360c7f50ef7e358ab287cae2ad28e4c8985fbf4612d345595eb7cdf0d438dbe06e0ebcc0b96f51d42e14b7dc96d1caa1f94eb976cb86109eb32d1e631a56a7e5c3fe4b1634dfd1d0f29d010b2334bf9ff0f2258d55f34cba0b9548692914de8426a2f601f75d6a6d6b7370c4fe411a0c3dc2ce2b013c322247af08b4265663b57d119929f94692607a486884cd45c0b3fec3ce9c046fd40264444d462f7accbbac5692820b41a4f20b389d844616413a2124f0a15b6e76a44309c14d6fcc14d25f231f9350c32db172d29fb8acfd2c01af96ac44f46c7a9815d6504b4f0632c4f17ae4391d6b77be415e2858dd4040a8acc50983d5bbf1613af18d354a7e3695d79a1e79c2387c3e3987844da9b06c5db880d80ed38c5b499a99a04a2ab62b6df0b5948ad8899702b12875a3291b90dbe12f8ad1728986816b2b1b7a4b259fdd7157cf6211d22", 0xef0}, {&(0x7f0000001280)='}', 0x1}, {0x0}, {&(0x7f0000001580)="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", 0x1000}], 0x4, &(0x7f00000029c0)=ANY=[@ANYBLOB="60000000000000001d01000000000000af09ef81b3f2ef06759bf6bfe536dbc0627fa77bee2d237605146e2ab1b6ae158eb99e7461bca705985809a3fc81ad0fcce2d85018873f537191541dc08d7e6a92fccd6fb863f6633020fa0000000000d00000000000000002010000040000002c0c0f3929306266778d2c40d6752d6170d100a7377070638269edd9df6f48bfc8563c8bbfbb15c84ae8f598335c03a111b4f69778d354b846948f6ef64f1c9dc5ecafad5608d1fae5ced4ba5bd682a7f884f67259b3261b248011daa1fcb42a77d2c1f21d80d6f149a6786d19cb5d1a279796a74177e101e39c467f0dee1dea4adec6e85b98403b4f5fcd9d5396b5d2a763194ac6fbb031020e371b43622bc4113af1dc69c22b1b8b869be993421283fc493cc29e4aa3cd6e284a04d3000000d800000000000000000000002a070000f639c3e3cb91d812fcffdeb3a5eb4af98f9beb14139598ea7b6bbc6149e4b0286bce934b3ba98c37be436417a54cdac6c311e33ee15b4739463472a9f86abc0e88c31b27c2b15db063b51716df8b00fa1164e3b26b977aab070eb600d51f328868a55c3a8d2105e737a59b511e9dff68acbccbc9b47dc7421df5cd68e7997eab9f42a523f3237308d469b7c5a82ad415469cc9a832cd2ca6832e2b48d8f8296b4632b4b0807c9024a878c0895a41d2d94715a127b02cf39a52bf1ae36526ce8e3d00000000000000780000"], 0x280}}, {{&(0x7f0000002700)=@can, 0x80, 0x0, 0x0, &(0x7f0000003cc0)=[{0x10, 0x10c}, {0x68, 0x10c, 0x7fff, "e306a91faa81cd5b168825206efd2329b2a28f40e21e23c4ba3bcc09eb09448be1437a2308c1b1d6f77004abcbcc09c1d574ee816a8fe7bc798c6dd902127890c769fefb7fa3f7a7c2327b8aa8bc1330089d4c6a4489bf"}], 0x78}}, {{0x0, 0x0, 0x0}}], 0x3, 0x8000) 23:26:04 executing program 4: syz_mount_image$vxfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10) 23:26:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x891a, &(0x7f0000000280)={{0x2, 0x0, @empty}, {0x2, @local}}) 23:26:04 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x890c, 0x0) [ 554.134084][T14397] loop3: detected capacity change from 256 to 0 23:26:04 executing program 4: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000380)="b8d82e765484a0996172c870390996ba78a7f957c4b6111e29a92c4e765580703aba8767fa4ac36aa5de0f4ad2be468cddc8cfa2f2", 0x35, 0xfffffffffffffffb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x0, &(0x7f0000000180)) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}, 0x0) getitimer(0x2, &(0x7f00000003c0)) add_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="97d18fe897a01690b8a180ef74bd7e320a4628", 0x13, r0) r2 = request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='\x7f\x00\x9d\x98\x06\x00\x8a\xe3\x7fs\x00\x00\xa0\xf4\xdb\xae\x00\x00\xed\x00', r0) add_key$user(&(0x7f00000001c0)='user\x00', 0x0, 0x0, 0x0, r2) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000540)='asymmetric\x00', 0x0, &(0x7f00000005c0), 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='!\x00', 0x0) [ 554.275935][T14397] Mount JFS Failure: -22 [ 554.280356][T14397] jfs_mount failed w/return code = -22 [ 554.351959][T14397] loop3: detected capacity change from 256 to 0 [ 554.417420][T14397] Mount JFS Failure: -22 [ 554.422037][T14397] jfs_mount failed w/return code = -22 23:26:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000002c80)='oom_adj\x00') getsockname(r0, 0x0, 0x0) 23:26:06 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:06 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self\x00', 0x20040, 0x0) 23:26:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001200130400000000000000000400000039"], 0x40}}, 0x0) 23:26:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) 23:26:06 executing program 5: fanotify_mark(0xffffffffffffffff, 0x5, 0x8001018, 0xffffffffffffffff, 0x0) 23:26:06 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 556.234686][T14430] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 556.311751][ T34] audit: type=1804 audit(1617837966.789:8): pid=14433 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir193939770/syzkaller.U7Wx8K/179/bus" dev="sda1" ino=15123 res=1 errno=0 23:26:06 executing program 5: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f0000002640)={[{}]}) 23:26:06 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) 23:26:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@getlink={0x28, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x4, 0x64}]}, 0x28}}, 0x0) 23:26:07 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 557.139224][ T34] audit: type=1804 audit(1617837967.619:9): pid=14443 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir193939770/syzkaller.U7Wx8K/179/bus" dev="sda1" ino=15123 res=1 errno=0 [ 557.313015][ T34] audit: type=1804 audit(1617837967.659:10): pid=14444 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir193939770/syzkaller.U7Wx8K/179/bus" dev="sda1" ino=15123 res=1 errno=0 [ 557.338572][ T34] audit: type=1804 audit(1617837967.739:11): pid=14445 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir193939770/syzkaller.U7Wx8K/179/bus" dev="sda1" ino=15123 res=1 errno=0 [ 557.356803][T14449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 557.363871][ T34] audit: type=1804 audit(1617837967.749:12): pid=14434 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir193939770/syzkaller.U7Wx8K/179/bus" dev="sda1" ino=15123 res=1 errno=0 23:26:08 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002200)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 23:26:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000002780)="a2bd798002209dca553023de5d7b5faa2b1d571fd9d5f5d4f4aca3b61744552bf9826cf705a2af86254937970c36ab2e84ab83ebd2c352316e9ab425af73fe1536221d44d7b6d98c0762514bf6ebf91bb13e2c35667d56c8f02142df568cc4e1f981e9a14b663727a2d204ea598f25e5679b53d9568a18f74179829747f5a8aee33f5c98dc5646530fc3", 0x8a}, {&(0x7f0000002840)="8e16241aab45583f6fe23965466eb81aa81be4237f47f7a6dd1d7bdd39b12ca235e2a803a41a25e1976346d43da8f383094e6110dc48c06c3c7c0452876e657eac25ac61a2f150cc71d0e6723fdf0d315621a810cc11c13e56accb6e996925e38f3f0e40918dbf07162a21e72c37fff47bf8aff7d2ffee95ed384db1ff8a3885aed36632e5c80ab42f5eb78493331886c70ab7", 0x93}, {&(0x7f0000002c40)="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", 0xda4}], 0x3}}], 0x1, 0x0) 23:26:08 executing program 3: syz_open_dev$swradio(0xfffffffffffffffe, 0x0, 0x2) 23:26:08 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@getlink={0x10, 0x12, 0x0, 0x0, 0x0, {0x10}, [@IFLA_EXT_MASK={0x8}, @IFLA_XDP={0x4}, @IFLA_IFALIAS={0x14, 0x14, 'ip6gre0\x00'}]}, 0x40}}, 0x0) 23:26:08 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') read$FUSE(r0, 0x0, 0x0) 23:26:08 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) 23:26:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 23:26:09 executing program 5: socketpair(0x1, 0x0, 0x0, &(0x7f0000000b40)) 23:26:09 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000002c80)='oom_adj\x00') write$midi(r0, &(0x7f0000000280)='1~', 0x2) 23:26:09 executing program 3: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000011c0)=0xffffffffffffffff, 0x4) 23:26:09 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) 23:26:09 executing program 5: syz_mount_image$jfs(&(0x7f0000001500)='jfs\x00', &(0x7f0000001540)='./file0\x00', 0x0, 0x0, 0x0, 0x1020, &(0x7f0000002980)) 23:26:09 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:10 executing program 0: syz_mount_image$romfs(&(0x7f0000000000)='romfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000003480)=[{&(0x7f0000000080)="b1", 0x1, 0x776231fe}, {&(0x7f0000001140)="ec", 0x1, 0x100000000}], 0x24, &(0x7f0000003540)) [ 559.990441][T14489] loop0: detected capacity change from 264192 to 0 [ 560.181245][T14489] loop0: detected capacity change from 264192 to 0 23:26:11 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:11 executing program 5: syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x3, 0x0) 23:26:11 executing program 3: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0) 23:26:11 executing program 4: r0 = socket$caif_stream(0x25, 0x1, 0x3) connect$caif(r0, &(0x7f0000000000), 0x18) 23:26:11 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:11 executing program 0: clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe2$9p(&(0x7f00000002c0), 0x0) 23:26:11 executing program 3: setitimer(0x0, &(0x7f0000002100)={{}, {0x77359400}}, &(0x7f0000002140)) 23:26:11 executing program 5: rt_sigaction(0x0, &(0x7f00000001c0)={&(0x7f0000000140)="c4a25d2f647c0066644334fef347a52ef30f0feb9e400ffbf48b89d1fe19bcc42109fc28c4c2f9db8d112170f5c4217829b9a0d2000065f3430fd6cf", 0x40000000, &(0x7f0000000180)="c402a90a4fa52647d9d0c401ffe6450f8f69f0918f5c220000363666660ff86ff836f20f7c3a42d2cb46dbee3643d3db660f3a22450345", {[0x9]}}, &(0x7f0000000280)={&(0x7f0000000200)="43dbeb6573d3c4017d71f50467f3470f01e8c4c17950d5f08175a87d0500003e66430f550767430f7e27f2410fd6f2c4a11165700e", 0x0, &(0x7f0000000240)="d3ffc4c3e10e0643f342a76666660fe3163e660fc4b96dec8bef0643e057f2ad26660f383cae090e117fc401fd11fb45dbe4"}, 0x8, &(0x7f00000002c0)) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='#\x00', r0) 23:26:11 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000019c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) bind$alg(r0, 0x0, 0x0) 23:26:11 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:12 executing program 0: syz_mount_image$romfs(&(0x7f0000000240)='romfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000001840), 0x0, &(0x7f0000001940)={[], [{@fowner_eq={'fowner', 0x3d, 0xee00}}]}) 23:26:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000180)=ANY=[], 0x2ea4}}, 0x0) [ 561.952733][T14530] romfs: Unknown parameter 'fowner' [ 562.024474][T14530] romfs: Unknown parameter 'fowner' 23:26:13 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:13 executing program 5: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x42, 0x0) 23:26:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000002c80)='oom_adj\x00') read$FUSE(r0, 0x0, 0xfffffffffffffd4d) 23:26:13 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8917, 0x0) 23:26:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000780)={0xffffffffffffffff, 0x4, &(0x7f0000000740)={0x0}}, 0x0) 23:26:14 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') fanotify_mark(r0, 0x52, 0x8000002, 0xffffffffffffffff, 0x0) 23:26:14 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r2, 0x0) 23:26:14 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x181841, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$hfsplus(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 23:26:14 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000019c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 23:26:14 executing program 0: r0 = fanotify_init(0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000019c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) fanotify_mark(r0, 0x1, 0x8000028, r1, 0x0) 23:26:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000780)={0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x0}, 0x300}, 0x0) 23:26:16 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r2, 0x0) 23:26:16 executing program 0: syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000500)) 23:26:16 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, 0x0) 23:26:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {{0x1b}, {@void, @val={0xc}}}}, 0x20}}, 0x0) [ 565.999171][T14590] cramfs: wrong magic 23:26:16 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f00000000c0)) [ 566.077973][T14590] cramfs: wrong magic 23:26:17 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:17 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x5411, 0x0) 23:26:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r2, 0x0) 23:26:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 23:26:17 executing program 4: r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f00000002c0), 0x4) 23:26:17 executing program 0: syz_mount_image$jfs(&(0x7f0000001500)='jfs\x00', &(0x7f0000001540)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0x48000000, &(0x7f0000002980)) [ 567.733279][T14623] Mount JFS Failure: -22 [ 567.737738][T14623] jfs_mount failed w/return code = -22 [ 567.803844][T14623] Mount JFS Failure: -22 [ 567.808455][T14623] jfs_mount failed w/return code = -22 23:26:19 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:19 executing program 5: statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 23:26:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r2, 0x0) 23:26:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000130400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04050500005d0400280012"], 0x48}}, 0x0) 23:26:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) [ 568.996422][T14643] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 23:26:19 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/tcp\x00') 23:26:20 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:20 executing program 4: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qrtr-tun\x00', 0x1) write$qrtrtun(r0, &(0x7f00000001c0)="fc", 0x1) 23:26:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000002c80)='net/dev\x00') read$FUSE(r0, 0x0, 0x47) 23:26:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, 0xffffffffffffffff, 0x0) 23:26:20 executing program 0: syz_mount_image$jfs(&(0x7f0000001500)='jfs\x00', &(0x7f0000001540)='./file0\x00', 0x0, 0xaaaaaaaaaaaac81, &(0x7f0000000a00)=[{&(0x7f0000000940)="4a531b16032b5328de7039b39206b2c27bf1a791ad3c5dfc318feb1eabc64a5a51c177d7080eb012e84d481ad88a20d63ecde89e85d35d0f9296b3153fe49b0da76ef361ebfcee64f13f90dc3860268d6ec0562cd5815d7dfd236f415e2521f356002b123cf1b8bba1b8bcc6d59e247b46f75a34613e2730e87817cd7ffe8bba8bd0f58018f79cfc171f48670bd9c9a874f8c860c77e3b570977bd932f746fafc877addef228bb056e6e5b4b7a77ab3c", 0x0, 0x1f}], 0x82844, &(0x7f0000002980)) 23:26:20 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) [ 571.305593][ T3119] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.312254][ T3119] ieee802154 phy1 wpan1: encryption failed: -22 23:26:22 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB="60000000000000001d01000000000000af09ef81b3f2ef06759bf6bfe536dbc0627fa77bee2d237605146e2ab1b6ae158eb99e7461bca705985809a3fc81ad0fcce2d85018873f537191541dc08d7e6a92fccd6fb863f6633020fa0000000000d00000000000000002010000040000002c0c0f3929306266778d2c40d6752d6170d100a7377070638269edd9df6f48bfc8563c8bbfbb15c84ae8f598335c03a111b4f69778d354b846948f6ef64f1c9dc5ecafad5608d1fae5ced4ba5bd682a7f884f67259b3261b248011daa1fcb42a77d2c1f21d80d6f149a6786d19cb5d1a279796a74177e101e39c467f0dee1dea4adec6e85b98403b4f5fcd9d5396b5d2a763194ac6fbb031020e371b43622bc4113af1dc69c22b1b8b869be993421283fc493cc29e4aa3cd6e284a04d3000000d800000000000000000000002a070000f639c3e3cb91d812fcffdeb3a5eb4af98f9beb14139598ea7b6bbc6149e4b0286bce934b3ba98c37be436417a54cdac6c311e33ee15b4739463472a9f86abc0e88c31b27c2b15db063b51716df8b00fa1164e3b26b977aab070eb600d51f328868a55c3a8d2105e737a59b511e9dff68acbccbc9b47dc7421df5cd68e7997eab9f42a523f3237308d469b7c5a82ad415469cc9a832cd2ca6832e2b48d8f8296b4632b4b0807c9024a878c0895a41d2d94715a127b02cf39a52bf1ae36526ce8e3d0000000000000078"], 0x280}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000002780)="a2bd798002209dca553023de5d7b5faa2b1d571fd9d5f5d4f4aca3b61744552bf9826cf705a2af86254937970c36ab2e84ab83ebd2c352316e9ab425af73fe1536221d44d7b6d98c0762514bf6ebf91bb13e2c35667d56c8f02142df568cc4e1f981e9a14b663727a2d204ea598f25e5679b53d9568a18f74179829747f5a8aee33f5c98dc5646530fc308", 0x8b}, {&(0x7f0000002840)="8e16241aab45583f6fe23965466eb81aa81be4237f47f7a6dd1d7bdd39b12ca235e2a803a41a25e1976346d43da8f383094e6110dc48c06c3c7c0452876e657eac25ac61a2f150cc71d0e6723fdf0d315621a810cc11c13e56accb6e996925e38f3f0e40918dbf07162a21e72c37fff47bf8aff7d2ffee95ed384db1ff8a3885aed36632e5c80ab42f5eb78493331886c70ab7cbd5a712c41f1b6fc2ea4341ea1d10577e8ca9aeaec8a3", 0xaa}, {&(0x7f0000002c40)="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", 0xd8c}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 23:26:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, 0xffffffffffffffff, 0x0) 23:26:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000002c80)='timers\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) 23:26:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@getlink={0x20, 0x12, 0x413, 0x0, 0x0, {0x3}}, 0x20}}, 0x0) 23:26:23 executing program 5: request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0) 23:26:23 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) pipe(0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x2) r2 = creat(&(0x7f0000000000)='./bus\x00', 0xda) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000002c0)="da", 0x1, 0x7}]) r4 = open(&(0x7f0000000140)='./bus\x00', 0x28000, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) 23:26:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, 0xffffffffffffffff, 0x0) 23:26:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=ANY=[], 0x280}}], 0x1, 0x0) 23:26:24 executing program 0: socket(0x11, 0xa, 0x9b) [ 573.710164][ T34] audit: type=1804 audit(1617837984.189:13): pid=14702 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir193939770/syzkaller.U7Wx8K/194/bus" dev="sda1" ino=15157 res=1 errno=0 23:26:24 executing program 5: syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x0, 0x4000) [ 574.435811][ T34] audit: type=1804 audit(1617837984.919:14): pid=14712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir193939770/syzkaller.U7Wx8K/194/bus" dev="sda1" ino=15157 res=1 errno=0 [ 574.574646][ T34] audit: type=1804 audit(1617837984.989:15): pid=14702 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir193939770/syzkaller.U7Wx8K/194/bus" dev="sda1" ino=15157 res=1 errno=0 23:26:26 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:26 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r0, 0x0) 23:26:26 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x541b, 0x0) 23:26:26 executing program 0: syz_mount_image$jfs(&(0x7f0000001500)='jfs\x00', &(0x7f0000001540)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0x7a00, &(0x7f0000002980)) 23:26:26 executing program 4: syz_open_procfs(0x0, &(0x7f0000002040)='comm\x00') 23:26:26 executing program 4: syz_mount_image$hfsplus(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x81, 0x0, "80f4a231b3bd2b606c8f205a68c8a18e8213f89254c3fb0f61f9e5e980d4e2dc420943e5c14761e5e96ad7c6af4edcebee6114a455a3137991cbfceead5562a4c385af0cf69b80c5e54238c390c28e4ae4921f4695d9884f2dcd034cea63c4b3d91dc50db66cc21566b0ef2fa04566728215e9642baf57c2f9"}, 0x0, 0x0) 23:26:26 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:26 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r0, 0x0) 23:26:26 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)) 23:26:26 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001700)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000016c0)='team\x00', r0) 23:26:27 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() syz_open_dev$video(&(0x7f0000002880)='/dev/video#\x00', 0x800, 0x4000) 23:26:28 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r0, 0x0) 23:26:29 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:29 executing program 5: socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0xf9, 0x0, 0x3, 0x0, 0xc9, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x1, 0xed, 0x80, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x2502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 23:26:29 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000008940)={{0x12, 0x1, 0x0, 0xd8, 0xd2, 0xea, 0x0, 0xc52, 0x2862, 0x67de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x76, 0x44, 0xa4}}]}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:26:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)="39000000140081ac00002c000500018701546f0800008647756900002a0546b9995336ba00000000000cf7bf7363018d68faaffe77800fcc88", 0x39}], 0x1}, 0x0) 23:26:29 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r1, 0x0) 23:26:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000000000001000000020000a3"], 0x30}, 0x0) 23:26:30 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:30 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r1, 0x0) 23:26:31 executing program 4: syz_open_dev$binderN(&(0x7f0000001100)='/dev/binder#\x00', 0x0, 0x2) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 23:26:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @dev, 0x0, 0x0, 'rr\x00', 0x32}, 0x2c) 23:26:31 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e002030029000505d25a80648c63940d0424fc60100011400a000000013582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000880)) 23:26:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000001100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001340)='TIPCv2\x00', 0xffffffffffffffff) [ 581.027320][T14784] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x2e48/0x3440 [ 581.118882][T14786] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x2e48/0x3440 [ 581.402264][T14791] binder: 14790:14791 ioctl 81f8943c 0 returned -22 [ 581.426597][T14791] binder: 14790:14791 ioctl 81f8943c 0 returned -22 23:26:33 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:33 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r1, 0x0) 23:26:33 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x9, 0x1, 0xffffff01, 0x1821, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000000380), 0xc, &(0x7f0000002840)={&(0x7f0000002440)={0x2cc, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1b}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="437814ac1df86ecf4f3469407ac4bea7"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7b250a904db3b814"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e1a0431ff158ee03"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "756404830e9fe262"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a350ca98c280b2ada5c306ce44ad103d"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ab1b59d54babeb2a67cebef87adad2752658f9361e725855"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "87185656e0481dac"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ac03718363473d8a92dcfeabc001edf5b0772880a0d1ae7d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1380a36a0004f049"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "556ad360356b32b6"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="96c7d660ca45f8ef31e847d8de38a6fd"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7355a07906c92fb01f596fa952067fa404e9ab4d827dbf22"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="77426bdbf486fd3fc48d1016feae2ceda823242454bd34b34ab09f76391e5960"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "845461b5d441fa76"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="83785012bb41128afd8d723bdfd649096928a01396178eb4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "369c63952493d913"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e5c112f4ab2ad4fb27c235a4da34ce47da57002b6c8b22cb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f2da8304fa1bd65787c69e0773e8a936"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "006e64a4cfa40424"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7b39219cd9f31c54166712eeb9bea12f98ffa244a1b8708678a63b4d8d099ec5"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "908baa23367c69f0"}]}, @NL80211_ATTR_REKEY_DATA={0xb0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5ea52d4d7a53bcd9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c5aa4cd2d8066976afbcb0f467f45cc443bcb747fd3b3a12"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4acc21b6268750ba5820e22374f53fea"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bf2e27499b0699048a4741addaafe5d81b13a386c116cb85"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="19d961829b282a54f23cf580149db9db36661261340a2460"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f6679fe9c3d0926c215732fd01642b47"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="563749dcbbfe615adee3c5e16f7f5e81"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fd95031cddd3c8543d542154397af445b74de0c811b03738faaa837e57939b13"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_VERSION={0x5, 0x3}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0001200}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv4_getnetconf={0x4c, 0x52, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NETCONFA_RP_FILTER={0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x4}, @NETCONFA_FORWARDING={0x8, 0x2, 0x5}, @NETCONFA_FORWARDING={0x8, 0x2, 0x1ff}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x400}, @NETCONFA_FORWARDING={0x8, 0x2, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x0) mknod$loop(&(0x7f00000003c0)='./file0\x00', 0xebf789d994b9a26b, 0x0) sendmsg$nl_route(r2, &(0x7f0000002800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000042}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)=@delneigh={0x4c, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfd, {0x1c, 0x0, 0x0, r3, 0x40, 0x1, 0xc71f7057349ad004}, [@NDA_DST_IPV6={0x14, 0x1, @private2={0xfc, 0x2, [], 0x1}}, @NDA_LLADDR={0xa, 0x2, @link_local}, @NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_PORT={0x6, 0x6, 0x4e24}]}, 0x4c}}, 0x406c080) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) 23:26:33 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d93ada6d6418cf32515bf47352f128de0722c8c2", "f28e5294164f833e9b39ed9833b7ce31d05a0a02"}) 23:26:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) [ 582.991101][T14807] device batadv0 entered promiscuous mode 23:26:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r2, 0x0) [ 583.224946][T14807] device batadv0 left promiscuous mode [ 583.413528][T14811] device batadv0 entered promiscuous mode [ 583.434797][T14811] device batadv0 left promiscuous mode 23:26:34 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0xfffffffffffffe3f}}, 0x0) 23:26:34 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) 23:26:34 executing program 0: syz_mount_image$xfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000004800)=[{&(0x7f0000004580)="86", 0x1}, {&(0x7f0000004640)="a7", 0x1, 0x240000000}, {&(0x7f0000004700)='Q', 0x1}], 0x0, 0x0) 23:26:34 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)) 23:26:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r2, 0x0) [ 584.372980][T14832] loop0: detected capacity change from 264192 to 0 [ 584.481332][T14832] loop0: detected capacity change from 264192 to 0 23:26:36 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:36 executing program 5: syz_mount_image$vxfs(&(0x7f0000000080)='vxfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x81000, &(0x7f00000002c0)) 23:26:36 executing program 4: syz_mount_image$fuse(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, 0x0) 23:26:36 executing program 0: process_vm_readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/161, 0xa1}], 0x1, &(0x7f0000000c80)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 23:26:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r2, 0x0) 23:26:36 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r1, 0x0) 23:26:37 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:37 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000280)={0x8000aee, 0x1, &(0x7f0000000080)=[0x0], &(0x7f00000000c0), &(0x7f0000000100), 0x0}) 23:26:37 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname(r0, 0x0, 0x0) 23:26:37 executing program 5: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x61c702, 0x0) 23:26:37 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r1, 0x0) 23:26:37 executing program 4: gettid() syz_mount_image$xfs(&(0x7f0000004500)='xfs\x00', &(0x7f0000004540)='./file0\x00', 0x0, 0x3, &(0x7f0000004800)=[{&(0x7f0000004580), 0x0, 0x2}, {&(0x7f0000004640)="a7", 0x1, 0x240000000}, {&(0x7f0000004700)='Q', 0x1}], 0x100, &(0x7f0000004880)={[{@allocsize={'allocsize', 0x3d, [0x32]}}, {@uquota='uquota'}, {@nouuid='nouuid'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/cuse\x00'}}, {@seclabel='seclabel'}, {@fsname={'fsname', 0x3d, '/dev/cuse\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@dont_appraise='dont_appraise'}]}) [ 587.847403][T14884] loop4: detected capacity change from 264192 to 0 [ 587.924285][T14884] xfs: Unknown parameter 'smackfstransmute' 23:26:39 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:39 executing program 0: r0 = socket(0x1, 0x1, 0x0) recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:26:39 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r1, 0x0) 23:26:39 executing program 5: r0 = gettid() sched_rr_get_interval(r0, &(0x7f00000020c0)) 23:26:39 executing program 4: mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x0, 0x0) 23:26:39 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r1, 0x0) 23:26:39 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@grpid='grpid'}]}) 23:26:39 executing program 0: syz_mount_image$xfs(&(0x7f0000004500)='xfs\x00', &(0x7f0000004540)='./file0\x00', 0x0, 0x0, &(0x7f0000004800), 0x0, &(0x7f0000004880)={[{@allocsize={'allocsize', 0x3d, [0x32]}}, {@uquota='uquota'}, {@nouuid='nouuid'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/cuse\x00'}}]}) 23:26:39 executing program 5: syz_mount_image$vxfs(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) [ 589.785373][T14912] XFS (loop4): Invalid superblock magic number [ 589.908952][T14912] XFS (loop4): Invalid superblock magic number [ 590.029252][T14932] xfs: Unknown parameter 'smackfstransmute' [ 590.092389][T14932] xfs: Unknown parameter 'smackfstransmute' 23:26:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r1, 0x0) 23:26:40 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f00000004c0)) 23:26:42 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:42 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/cuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f000000f1c0)) 23:26:42 executing program 5: syz_mount_image$xfs(&(0x7f0000004500)='xfs\x00', &(0x7f0000004540)='./file0\x00', 0x0, 0x2, &(0x7f0000004800)=[{0x0, 0x0, 0x240000000}, {&(0x7f0000004700)='Q', 0x1}], 0x100, &(0x7f0000004880)={[{@allocsize={'allocsize', 0x3d, [0x32]}}, {@uquota='uquota'}, {@nouuid='nouuid'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/cuse\x00'}}, {@seclabel='seclabel'}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@dont_appraise='dont_appraise'}]}) 23:26:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, r1, 0x0) 23:26:42 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 23:26:42 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 592.509650][T14962] loop5: detected capacity change from 264192 to 0 [ 592.562357][T14962] xfs: Unknown parameter 'smackfstransmute' 23:26:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x2012, r2, 0x0) 23:26:43 executing program 4: syz_mount_image$xfs(&(0x7f0000004500)='xfs\x00', &(0x7f0000004540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004880)) [ 592.644153][T14962] loop5: detected capacity change from 264192 to 0 [ 592.653747][T14962] xfs: Unknown parameter 'smackfstransmute' 23:26:43 executing program 0: syz_mount_image$udf(&(0x7f0000000080)='udf\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@volume={'volume'}}, {@lastblock={'lastblock'}}], [{@smackfsdef={'smackfsdef'}}]}) 23:26:43 executing program 5: syz_mount_image$fuse(&(0x7f0000002180)='fuse\x00', &(0x7f00000021c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000064c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB]) [ 593.259871][T14983] UDF-fs: bad mount option "smackfsdef=" or missing value 23:26:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket(0x11, 0x800000003, 0x8) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a0dffc2c654"}, 0x80) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000040)={0x5, 0x9}, 0x2) ftruncate(r2, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r2, 0x0, 0x80001d00c0d0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r4, &(0x7f0000000140)="0e887cf0d24501155e2be60d846f63d8d75987c9aa514a06d5526c82d559da4f1db632d976469ead1b6351555af5dfc5754e9926bbf6300870fe0e22b68c423d9794ce07f287449970d4289bf58b92f39df916353b861b40edfb44eb8a63ad558544eae3a3659193f4393f072ff97e48ffa077b690bd43a4a0097b3e12ee883b63ab222f31ae1458fe65622c4be57582c5325c20ac", 0x95, 0x4000000, &(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x8a, 0x40, "c1350fc664893f9526d7e5e4640179a3d729363e3c07381b25c0429fe279d231fb93242aeefc54a120e71390312221768b6d957f1545b7433e7cc049da125a", 0x1f}, 0x80) [ 593.372738][T14987] fuse: Bad value for 'fd' [ 593.379647][T14987] fuse: Bad value for 'fd' 23:26:44 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x80201, 0x0) [ 594.382382][ T34] audit: type=1800 audit(1617838004.859:16): pid=14994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=14098 res=0 errno=0 23:26:45 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x2012, r2, 0x0) 23:26:45 executing program 5: socket$inet6(0xa, 0x5, 0x3) 23:26:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket(0x11, 0x800000003, 0x8) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a0dffc2c654"}, 0x80) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000040)={0x5, 0x9}, 0x2) ftruncate(r2, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r2, 0x0, 0x80001d00c0d0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r4, &(0x7f0000000140)="0e887cf0d24501155e2be60d846f63d8d75987c9aa514a06d5526c82d559da4f1db632d976469ead1b6351555af5dfc5754e9926bbf6300870fe0e22b68c423d9794ce07f287449970d4289bf58b92f39df916353b861b40edfb44eb8a63ad558544eae3a3659193f4393f072ff97e48ffa077b690bd43a4a0097b3e12ee883b63ab222f31ae1458fe65622c4be57582c5325c20ac", 0x95, 0x4000000, &(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x8a, 0x40, "c1350fc664893f9526d7e5e4640179a3d729363e3c07381b25c0429fe279d231fb93242aeefc54a120e71390312221768b6d957f1545b7433e7cc049da125a", 0x1f}, 0x80) 23:26:45 executing program 4: mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x0, &(0x7f00000000c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id'}}) 23:26:45 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:46 executing program 4: socket$inet6(0xa, 0x811, 0x0) 23:26:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x2012, r2, 0x0) 23:26:46 executing program 5: pselect6(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 23:26:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket(0x11, 0x800000003, 0x8) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a0dffc2c654"}, 0x80) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000040)={0x5, 0x9}, 0x2) ftruncate(r2, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r2, 0x0, 0x80001d00c0d0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r4, &(0x7f0000000140)="0e887cf0d24501155e2be60d846f63d8d75987c9aa514a06d5526c82d559da4f1db632d976469ead1b6351555af5dfc5754e9926bbf6300870fe0e22b68c423d9794ce07f287449970d4289bf58b92f39df916353b861b40edfb44eb8a63ad558544eae3a3659193f4393f072ff97e48ffa077b690bd43a4a0097b3e12ee883b63ab222f31ae1458fe65622c4be57582c5325c20ac", 0x95, 0x4000000, &(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x8a, 0x40, "c1350fc664893f9526d7e5e4640179a3d729363e3c07381b25c0429fe279d231fb93242aeefc54a120e71390312221768b6d957f1545b7433e7cc049da125a", 0x1f}, 0x80) 23:26:46 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) 23:26:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x10, r2, 0x0) 23:26:48 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:48 executing program 5: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="7e1437b829115aa5ab537772a505819b16f7dc8a70a1e95d80baca905635e63a5245473ba74ec570f0aa14d845cf55e2eb45997d03e6721027d3e519d75a0abb7e7be34f4d5098c71d5870988f00cde73542c30bef7e23ee2358f016b1c402829c5000b67424b1152119deb31ce706e5b2f270", 0x73, 0x2baf}], 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB='nolargeio,uquota,logdev=./file0,dont_appraise,obj_user=-[,euid<', @ANYRESDEC=0xee01, @ANYBLOB="2c07000000616973652c00b037fccd6cde1d42d78d82cd852f161052477dca2565d8ecb841d3ea2181ad92815a06e72a231babeec3635d8e6d3bbcb0f18f0614ad27bbefe0ecdd3125d871a2be445fb73dc8267612a1b3ad9cad48643264050357d4e0109a23e653e17bfd2601124f418f9c72eb6d5db27b55110ec06092d0ce659ab5ff617e1073a31ac9af738fb295e803f6a36df71755e53b1bf205be47159a65f7f3b7deeaf561d3a961b59d95b1d55b436d5979c8ccefe7343f81199c5be84d3619408e38dd650e6423eb61cd9e6b2e343066b465f8325924d2079b4de82dfe2b76a40e05bc75"]) syz_mount_image$fuse(&(0x7f0000000140)='fuse\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0xee92}}, {@allow_other='allow_other'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'xfs\x00'}}, {@subj_type={'subj_type'}}, {@context={'context', 0x3d, 'root'}}, {@seclabel='seclabel'}, {@smackfstransmute={'smackfstransmute', 0x3d, '{'}}]}}) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000500)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0xfffffffc, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffe, 0x8, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 23:26:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000240)) 23:26:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket(0x11, 0x800000003, 0x8) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a0dffc2c654"}, 0x80) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000040)={0x5, 0x9}, 0x2) ftruncate(r2, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r2, 0x0, 0x80001d00c0d0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r4, &(0x7f0000000140)="0e887cf0d24501155e2be60d846f63d8d75987c9aa514a06d5526c82d559da4f1db632d976469ead1b6351555af5dfc5754e9926bbf6300870fe0e22b68c423d9794ce07f287449970d4289bf58b92f39df916353b861b40edfb44eb8a63ad558544eae3a3659193f4393f072ff97e48ffa077b690bd43a4a0097b3e12ee883b63ab222f31ae1458fe65622c4be57582c5325c20ac", 0x95, 0x4000000, &(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x8a, 0x40, "c1350fc664893f9526d7e5e4640179a3d729363e3c07381b25c0429fe279d231fb93242aeefc54a120e71390312221768b6d957f1545b7433e7cc049da125a", 0x1f}, 0x80) 23:26:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x10, r2, 0x0) 23:26:48 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 598.600251][T15060] loop5: detected capacity change from 43 to 0 [ 598.730262][T15067] fuse: Bad value for 'fd' [ 598.754086][T15060] xfs: Unknown parameter 'dont_appraise' [ 598.984354][T15060] loop5: detected capacity change from 43 to 0 [ 599.134181][T15067] fuse: Bad value for 'fd' 23:26:49 executing program 4: syz_mount_image$xfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000022c0)=[{&(0x7f0000000200)="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", 0x1000}], 0x0, 0x0) [ 599.189938][T15060] xfs: Unknown parameter 'dont_appraise' 23:26:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x10, r2, 0x0) 23:26:49 executing program 5: add_key$user(&(0x7f0000000100)='user\x00', 0x0, &(0x7f0000000180)="ad", 0x1, 0x0) 23:26:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={0x0}}, 0x0) [ 599.801775][T15086] loop4: detected capacity change from 8 to 0 [ 599.934903][T15086] loop4: detected capacity change from 8 to 0 23:26:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, 0xffffffffffffffff, 0x0) 23:26:50 executing program 4: syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={0x0}, 0x10) 23:26:52 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:52 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) 23:26:52 executing program 5: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 23:26:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, 0xffffffffffffffff, 0x0) 23:26:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000340), &(0x7f0000000380)=0x4) 23:26:52 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:53 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000840)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b5ddbdac"}, 0x0, 0x0, @userptr}) [ 602.442412][T15129] fuse: Bad value for 'fd' [ 602.451116][T15129] fuse: Bad value for 'fd' 23:26:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x2012, 0xffffffffffffffff, 0x0) 23:26:53 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)='^', 0x1}}, 0x200000d0) 23:26:53 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x50400, 0x0) 23:26:54 executing program 3: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2040, &(0x7f0000000100)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}}) 23:26:54 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)) 23:26:55 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:55 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f00000041c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 23:26:55 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00', r0) 23:26:55 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, 0x0) 23:26:55 executing program 3: socket(0x28, 0x0, 0xdc73) [ 605.020768][T15163] fuseblk: Bad value for 'fd' 23:26:55 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:55 executing program 0: getresuid(&(0x7f0000006a80), &(0x7f0000006ac0), &(0x7f0000006b00)) 23:26:55 executing program 4: syz_mount_image$xfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000003380)=[{&(0x7f00000000c0)='I', 0x1, 0x29299489}, {&(0x7f00000002c0)="878db81c2bcc5a928feb2efabad1c7fd912c488b47d20ca98f2912c57a68cbbe4c6969053b96c892bbb53f5249e66a5880cb8bbc7f7cd78cec35bfc4bba48843ab49c27f30ce733bca45fcc8a1ee890967a20d85f8d4787f182eb12d788a152d4c16fd9d61a013c6786a3f7abc1686f4ab319a59be1b79b32f1a54f1083dd40fd44687c040c1b3e10588bd5baf5411e940a518dd25030f579ee1c8c0fcce83963b2945fc5b1a9c77fe4e08250255a93b0ddea42b71b67eb3fa13cbcb1fe36a69b3139fab6f4e611d3e34dde5ec8a43a179241e0b266eab3c27d07db9ea62279e408e414e34825cebbd1c8d4b8281e09bc5c41dde7c329f64c904d0b0ece9194420803fad3ac14290c89ba7c3e82edf1085cc03cc8c82e12a2cc185a1b2ebb81c57fc1d337e795d71c8b8446afa266f13c3b79efbd500b5a93a95e1b229400626f2b8ca75bf07d0820ea807075d85662e6e1e6818fb99d791b964df30d21b715afb054f198e52c8327c5a167fb782b8fb45acdd8e544dfd712dcf9e815305a028fcf03241bfe066c75e88cca46779c9295778271ee37f61898dececc2e586ea4094df1f45179324328de6ddd26dc377c3c7fd16792fbea9e0636209f5d6acc73d84b98daa9c8678911ed187060d2f5f6f0e082ee9909fda0af0a4543e80be5c28af1c3b1b63cf0b3b6623bf677f0bb5b81e658ef3f4e76257dc869e65c527d77571a16fc863b94e896d56daf2c0770c74af22658c355b5b50f3ec39ad61401248b7af83fa8f608c8a40f0013469dada59a6dcaeb81cad00f46a5739712a593b4ea118f20555391a49b24a3140ec63ce70e192b562ff0ff66321d0f7f6d978a2eebb273b94e4562c677de75e99029a190286439196ec9bfb585b8e1f90e883410465afb119251ce0b8276d21e868bd5d20f387acb1bd966c53fc1e4d8849f0bd757219f858ec56ba2bcf8ab48db16e8f51e2a16517198f123d613f14555d83f0c3d9c49b771a4285224aa2dcc60c5da1726f1f134cc6163aa7ac72c28f44e13f33b596c96fab4381df93aeff039291a89dcec8fa611f7227a91d2ee3bc3503a2f0e26462ea0d915e60a6e5aca0bb6e62e55316cce17fe16d489c3821fad52ae1bf884ecdd5db96799984d0d12538a4e28b6dd5baa9693b9db45bbda9ec9790791ae8e72ae33b7898be11f8a3bbf30bf50113bef66e38f59de34e82fb1e2906a8eef12040f02441a0befec993e024b98927bbbff4c716c581582802881185bbb670ffa4770f0f490cc310a0f819b7579604bc03ab871adac61a4e081f4b286fe350d8befc6cb98e197bfc0325aa0db01e2b93db32f4f1c4e87390aebb86a922c98a5731bbf369e2c28f9778bfcbd8157e3570b652efc517b3b2f2e9242fcbac859d63a260d22c2ddd993079172a090d0b96acddb4adee0ccd0fcb7f70e5897dd23c7cee0d11f443a5b490fa01517fadc669eef8dd91a8b671c1c2afdb824d82ace79ee1c06967f7738b1a233f2e29359aefc8b6375d75b5a16a3ed80e51e394cd92a8a8f11e79747603d71b2429f84c49977f76db1fca9dcf7544af5e68e3ca8066a283875a28877f0b392975bb95367a571156ad754c7f9193ab3877f521370140d73eba8328a250c1482a37f2ec5f145c4cad5c93bc103e771b49122372f2a6371dae0901c0342478647f490caff6dfc5e38e20fc7cb0f23b4bf3faff23b09eda52cf6f174b1d2b655aef48bd20c2254fcee8c8a78f653b1e1eb709a74f191ae3e521cf770ca5cfdb2013d18ced29cd782510531e699980dab77d01601ac7827db0a535a104a9389c99800d215419ceb4dee20527a1078107f4a4505fd56f719f2d8a70f7d32dd8bc649f76e7e0eef51c07b22d877fa29f20fdddb38310686850869225e3a1f79534183ddca1e38b319c5aa20a1090a01e9332bad75a2c9a3d2bfce261e8b128fd755af0501ad746afd47c6e64063c95d01b435a234ae576f602a6de2c880cc61916637c5daf9904c36f1592e724bfc556ac7ff216ce82657afd447790980c55cf5070be05052e68f3baf5141d42f65e1773fb5f9d731257e5d0e5237f443e1c6ff105ded41fb9acd8599a479686ddcc765467e300ce78d73324f446f8d8f19c284bbf17d0c0ffe51ed6e790a9e952d2bf1ee43f5ff9fbd179a636227c0dad83147ddedd280e1139f21659e2992666ec1dc84b5406b7441da425e699d56f0a6396187fb370287453a5e1568079360e87e0caa589ce4194658c58be67845ab45d3bd0991507bd911bfe152d3a3f14ef6f0660b48922661eb5c8ae8a68b4fe543654af8e340b5607f3042b24d973099f22eac02535739d9c832d4eb63dd8ccfeb020ea3f83894c808066bfb9de3ca23eae3057ef72cd414467976b1806b0609935c92ec7a31c0f1accfdfa741f975a35dbca14ffce27e9d0afce963d7d6e46ca7669519c701a33a98daff6279299ccc4d0af1a297cd3f557bbecaf9755cabf282d8ebf7f9ed5ed2e8d3480d151d9b4e92f134495d13a43b3a51d3b84f191691e774b249d2d4c0ef0db965d35571ff8bd9fbe6070d9dd4bbfaf1445e5c8fae444925178b893112779696d720eaf4165d44582b4cf885bbf428e378b0326f886dcde6300de7616bc6b61deb2681286eef33538f24e9a7622841399afba62dc43bd270b9fe0c1ab767fed6aa690908f5506d53d4953df93e0c6799332b695d1473777df4f5f9b1d538b919f3400e3c4586e9ed01ec7f30699b4e8d0ec51dec1dd99d3e34995cb14b0cc7603f10e22174100b7c9fce89efe48a957f8f9dcd50848833351240450e8ff2f80834a05a183abdb9a91adacbfbb00a9a08f55d5541ba692dee61396862b6dfa1a2a02427f798a857fda0db1966d5852a88a79f862e9e50ab88083039bd768aba760134fa23388c736eb47833ba05f66d6ac7c80b49c5d142c90c33e45f896f79708ae8d7c4ed7b1bbe6b95bb96289ffad8d61b806873301fd9141cba0495aa560641f1bac104b599cfc47403e70118de40814d4e51f337108b216d076a9875b772af29153894230daf056f3e779ef942313504066ff9ab99ceebcfcc40707346c5ae9b230cbdfcf174284d82eddb1b918ea5e9c853e78b5a96f6934cfb098b5b3fdfd2791f2b04d9f3397d2b831336695258e59c2216c7755675830f4f5063bae831cd350dfa76b6df3765a78ed85825dce3a87dd6e825bfc84d130350c3b80105f483311f65954c335d58664c770d491854209f2df12c04fada1b1cea587254fa2fe9890bc1ec1d4cc80522b84a817793d9d90bde8fdfe318787b79e6e4aec15cdd40f1a81612dc447b93f123a4f51e446a004573b7705407a665831a69017332e5fb292bb71631542271306e4fc00c29be910ac162ec3a4c09a748c4c60ed23423d6cf3ddddd2306823efadc168376fbd0fba8c38ced58252a9ea050ff2590196210081ccd4df3b51be45578449966cf75e10abb6a7be321821fbeeea481397ca5370237331aeed9cbd04aaf135ab4e62b86004d4b0d8583e14597e2fb120d03bb51ee9172742b49ebb37c3d5bb7fcfe03ab1a497171f4abd531277cc79172292cf1e4c35dc212b1b4cc437cfc12450fdb127f5ef902c370ccba19a1594e6d88293642033e0ca894b963faf164fdf1d497fd4a1d83f5113f9d1d03b2ab4289bc4423f1469c49790de3447739e18eb7c6aa2282ac0133f14d8dd406b80356a7be6881f7de2c1f7df4d2cfcc589f838a1ac26c19b78c529e39945c3ea6e90a360d5ea8c4435dd64aeec44d515ecb2379aa0c2f20851f20a63f3a768e843b9ff3f1e4a8c0963ea89bc3bae624d8f0ea0e6624e2888b4cdd2717d1d5f8fb229a9fb8c120a20f60f44ba79585f6b00772d1bac9f389056e53960046c33ad324cadd640f40be947048ac9af32fbd26ec3d534217b1c1d83d1c431719b7f3fcb0a27dab8936a7d83662f61ce9582f029859101812f545cc5eb8690954f1b75cf8474224e24421aa53c2f60cfdf83d3cd7b290b66dc56858dab3631e27b8b34b652fd633a1ccfb34843ad458a5449bdc0ad11f7d54c20ad97c4c01c610e6953af1f294ac59eb41f8414d675e95e4207db55c6efbeef7bff90a210a580fefaa14dae48dba045b67eba3a9af563eb704792860ae1fe65a87441330fec35a4e34460d9c8046eafdd736a7eb7521d33baa337949d46e022a2c880682a032293df09dda642ce4615e1e3f917e214989023448bb2ec45e59cbf214fb9b40555eee5acccee9b6f591893156e2915a284f31af51669bc6ae5fb8044b81c86dc729a370bc5c7c46b5621fde8f2630d16f0b7f3038961761e38c83e202542994783ca846d393d1c5c54f152c88d73d9234d99fa0cab7bd2d7daae2916ca7e956e74295db285ee4b64c184c66eacd060d5ec193f60f03521dd9decc066ca678d6a999ccc1537d7d0a3c6f398558ab8f0dc6926463815d37026fbec93a3b0b04ce3408bf9579cc22e49832210afe05b2c5b3cc0ae11f02ccc925a74e78fbe0b4d93c733269afbbb22ce243d7a1138d9c4ed207d17825c4b5533a697d99d86a9928f2f5d9f3ad8a21083ce00a084897848772f1e5969021547eff507b159a922fb7b595b7a92d42f12c12f71e0f5ffb468a0492a03d25f03883b324b21e408798c0949ecdc5dae15a8dab57104e32f41d8c28ad5e7c61966ad27ba7ea9b1b6c4d48a334f46a52d325d033143e9353069fd12a0e33685e56758c9fb8c82a8adc7d4dd9081472c59585113cbe698701b544845a170fccb755a236de0dea24a3f7101d1706c590a6a1810da71076944cdf9c95c001b8df59bc8d951d21b505d411148862b859c15bd89f5bf4a3e0639e0e0101cc2c35fc7d2c5cd9426d9a89d5a168d0ed7c7f56463ed9006ae29282fd36b51d7e810f1e7480db2f81b44eb11d6f9f626fc8ad1c6a186961ad15ab75db25d1e7ced72647b909e91ce734aff3126991dc97629bfa6174bf1e735ac866b9443185e67c9a30d19de111027d8e622280ea09e442c6f64ab2707f6eb0fbe8b62bfcba93d038f14f24c5c89fd5839854c5944fa566adec56d5c35f43c9b62a3c999d86d1a5793d2571978429ff16539efe46e52008590027380d7b2e18ea2f1d2c26a58d1aa765d9515c3360e4c2a508ca231bbdfd97bc1923ac5798eddc795ad4d87f1896470e26ce13749a3af288e8666414d268589c632b8252e4324e3ddd01a349620269248908f60cf6d7354d1b8764f85452076e4b51e2a8f19ec47556ebaeb79281627e69a85cb2ef26f90f29760d6ea74b42628bf18b078ecb39a76c9c6d6604d42c3e69a12ac920765fe670eff405e08e7c9003dbee815f183f9df8c52f55989253bafd3e3dd4b5c1c3c4477e1d7e0928e649fc83cad354ea1e91ffcedfcc11b5caecbb0015aae8ec4ad4535f54efb06dc3e67b603d02a899edcc3fd95d17419afd3e0dbb44c2afceef50bc5c41531c995ea68026adba7b480e664ed5785b87d0457ef06fcbc09fd0372aa6a5fccb344ad0825733ef078a8133059926565bc90c7a0952840627ff7388f7d5982d7bb41cf099d15c9e4698d8de458f88378e1305c0a6e2d8b8120bac5cd91a5a5f8c5176752eba0e1a32cb506e4702500bbf0f541ecec3fd98b0a6dbc3687c66f8c5ce6812092feab603c355bb35dec61bdd70601a9c2f1996983943c10db87124c01e5e95880708fd1f7d00e9fde471f1b032267ae9cc60b530eef992154f61961cd207f8a9e9d63ea8c75844c0fb0c8b8bff18375adac7b34c87939", 0x1000, 0x1}], 0x0, 0x0) 23:26:55 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002880)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 23:26:55 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) [ 605.822622][T15175] loop4: detected capacity change from 55700 to 0 23:26:56 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x403, 0x0) [ 606.037722][T15175] loop4: detected capacity change from 55700 to 0 23:26:56 executing program 5: syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) 23:26:58 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:58 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:26:58 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x2348c2, 0x0) 23:26:58 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, 0x0) 23:26:58 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, 0x0) 23:26:59 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:26:59 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x502, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000180)={0x22, 0x3, 0x0, {0x0, 0x1, 0x0, '-'}}, 0x22) 23:26:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x40) 23:26:59 executing program 0: socket(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 23:26:59 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$AUDIT_TRIM(r0, 0x0, 0x0) 23:26:59 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x26) 23:26:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read(r1, 0x0, 0x6c00) dup3(r1, r0, 0x0) 23:27:01 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:01 executing program 3: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:27:01 executing program 5: syz_open_dev$sg(&(0x7f0000002100)='/dev/sg#\x00', 0x9, 0x0) 23:27:01 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="410f0090411f6f12440f01cb0f01f2b9800000c00f3235002000000f3066b89f008ed867420f01d136420fdd23c401fc11730064420fc76d5448b800380000000000000f23d80f21f835c00000a00f23f8", 0x51}], 0x1, 0x40, &(0x7f0000000180), 0x0) 23:27:01 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x6, 0x0, 0x0, 0x2}}, 0x26) 23:27:01 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:02 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 23:27:02 executing program 3: sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) 23:27:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x1be9}, 0x8) 23:27:02 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 612.482873][T15250] sctp: [Deprecated]: syz-executor.0 (pid 15250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 612.482873][T15250] Use struct sctp_sack_info instead 23:27:03 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@e) 23:27:03 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0), 0x8) 23:27:04 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001700)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000001780)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 23:27:04 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000800)='/dev/bus/usb/00#/00#\x00', 0xcb2d, 0x0) read$usbfs(r0, 0x0, 0x0) 23:27:04 executing program 4: syz_open_dev$usbfs(&(0x7f0000000800)='/dev/bus/usb/00#/00#\x00', 0xcb2d, 0x0) 23:27:04 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000002640)='/dev/sequencer\x00', 0x0, 0x0) 23:27:05 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:05 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00', 0xffffffffffffffff) 23:27:05 executing program 5: syz_io_uring_setup(0x5f7, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 23:27:05 executing program 4: syz_open_dev$sg(&(0x7f0000002100)='/dev/sg#\x00', 0x0, 0x0) 23:27:05 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) 23:27:06 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180)='wireguard\x00', 0xffffffffffffffff) 23:27:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) 23:27:07 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000800)='/dev/bus/usb/00#/00#\x00', 0xcb2d, 0x200202) read$usbfs(r0, 0x0, 0x0) 23:27:07 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000002200)) 23:27:07 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid\x00') 23:27:07 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x8000000) 23:27:07 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:08 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/dlm-monitor\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000000)) 23:27:08 executing program 4: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) 23:27:08 executing program 5: recvmsg(0xffffffffffffffff, 0x0, 0x80000002) 23:27:08 executing program 3: syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x7177, 0x0) 23:27:09 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000000) 23:27:09 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcsa\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) 23:27:10 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:10 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getpeername$unix(r0, 0x0, 0x0) 23:27:10 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, 0x0) 23:27:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x8}, 0x0) 23:27:10 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) 23:27:11 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:11 executing program 4: syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x3, 0x0) 23:27:11 executing program 3: getresuid(&(0x7f0000006a80), 0x0, 0x0) 23:27:11 executing program 0: r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000034c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 23:27:11 executing program 5: socketpair(0x0, 0x3, 0x0, &(0x7f0000000000)) 23:27:11 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/cuse\x00', 0x2, 0x0) 23:27:11 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) bind$unix(r0, 0x0, 0x0) 23:27:13 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:13 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) 23:27:13 executing program 4: mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000021c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee00}}) 23:27:13 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000800)='/dev/bus/usb/00#/00#\x00', 0xcb2d, 0x0) 23:27:13 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) 23:27:13 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:13 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000002c0), 0x4) 23:27:13 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 23:27:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 23:27:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x2, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}]}]}, 0x38}}, 0x0) 23:27:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') read$FUSE(r0, &(0x7f0000001040)={0x2020}, 0x2020) [ 624.021687][T15395] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 624.030238][T15395] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 23:27:14 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 23:27:16 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000100)) 23:27:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_mtu}) 23:27:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x12) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0x14, 0x4) 23:27:16 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 23:27:16 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 625.901866][ T34] audit: type=1800 audit(1617838036.379:17): pid=15416 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15400 res=0 errno=0 [ 625.997404][ T34] audit: type=1800 audit(1617838036.449:18): pid=15416 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15400 res=0 errno=0 23:27:16 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x80805, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000440)={0x0, {0x4c}, 0x0, {}, 0xfffffffe, 0x0, 0x0, 0x19, "408b0301dcb8a402cc02a52532785aec11a63f6832927e2a8932b66ca63aa002e00751470e814ab516c15286fd20420448480002000007000000004800", "b89b67ed7f1d20d113f405d53b1b4549a3fcb55be159afa1c02188b895618eab"}) 23:27:16 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000002d40)=[{{&(0x7f0000000000)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1f4}}], 0x1, 0x0) 23:27:16 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 626.463833][T15421] bridge0: port 2(bridge_slave_1) entered disabled state 23:27:17 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x4052, r2, 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x1a0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000002640)={@desc={0x1, 0x0, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}}) fallocate(r0, 0x100000003, 0x0, 0x80019c) [ 627.032901][T15431] loop0: detected capacity change from 1028 to 0 [ 627.083464][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.094729][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 627.104040][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.115359][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 627.130053][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.141405][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 627.151237][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.162591][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 627.172230][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.183403][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 627.193142][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.204327][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 627.215331][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.226585][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 627.242397][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.253635][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 627.268635][T15431] ldm_validate_partition_table(): Disk read failed. [ 627.292536][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.303704][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 627.352566][ C1] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.363766][ C1] Buffer I/O error on dev loop0, logical block 0, async page read 23:27:17 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x942, 0x4) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x700, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc", 0x40}, {&(0x7f00000011c0), 0x24}], 0x2, 0x0, 0x0, 0xffffffe0}, 0xe000000}], 0x400002c, 0x4000000) [ 627.425259][T15431] Dev loop0: unable to read RDB block 0 [ 627.442705][T15431] loop0: unable to read partition table [ 627.469746][T15431] loop_reread_partitions: partition scan of loop0 (@‹ܸ¤Ì¥%2xZì¦?h2’~*‰2¶l¦: àQGJµÁR†ý BHH) failed (rc=-5) [ 627.544837][ T34] audit: type=1804 audit(1617838038.029:19): pid=15439 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir277661521/syzkaller.9vusF5/228/bus" dev="sda1" ino=13922 res=1 errno=0 23:27:18 executing program 4: r0 = openat$vcs(0xffffff9c, &(0x7f00000006c0)='/dev/vcs\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x10000000) [ 627.748705][ T34] audit: type=1804 audit(1617838038.079:20): pid=15439 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir277661521/syzkaller.9vusF5/228/bus" dev="sda1" ino=13922 res=1 errno=0 [ 627.774373][ T34] audit: type=1804 audit(1617838038.089:21): pid=15439 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir277661521/syzkaller.9vusF5/228/bus" dev="sda1" ino=13922 res=1 errno=0 [ 627.799706][ T34] audit: type=1804 audit(1617838038.109:22): pid=15441 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir277661521/syzkaller.9vusF5/228/bus" dev="sda1" ino=13922 res=1 errno=0 23:27:19 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)) 23:27:19 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x3d, 0xa1, 0x8}, 0x20) 23:27:19 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x155555555555525b, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0x100e, 0x2}], 0x0, &(0x7f0000000080)) 23:27:19 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) ioctl$sock_inet_tcp_SIOCINQ(r0, 0xc0189436, &(0x7f0000000040)) 23:27:19 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 629.235373][T15463] BPF:[1] FUNC _ [ 629.239249][T15463] BPF:type_id=2 [ 629.243171][T15463] BPF: [ 629.246012][T15463] BPF:Invalid arg#1 [ 629.249891][T15463] BPF: [ 629.249891][T15463] 23:27:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001780)={0x14, 0x0, 0x4, 0x70bd27}, 0x14}}, 0x0) [ 629.283656][T15465] BPF:[1] FUNC _ [ 629.287527][T15465] BPF:type_id=2 [ 629.291067][T15465] BPF: [ 629.294642][T15465] BPF:Invalid arg#1 [ 629.298540][T15465] BPF: [ 629.298540][T15465] 23:27:20 executing program 5: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8983, 0x0) 23:27:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="ec000000650001"], 0xec}}, 0x0) [ 630.006452][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:27:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0xffffffb8}) 23:27:20 executing program 5: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5450, 0x0) 23:27:20 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8940, 0x0) 23:27:22 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000004780), 0x27, 0x0, 0x0) 23:27:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x227c, 0x0) 23:27:22 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) 23:27:22 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x4, 0x9, 0xfff}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, r0}, 0x38) 23:27:22 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:23 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 23:27:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x22, 0x0, 0x0) 23:27:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x7}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) [ 632.736506][ T3119] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.744548][ T3119] ieee802154 phy1 wpan1: encryption failed: -22 23:27:23 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x4, 0x9, 0xfff}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 23:27:23 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x28, 0x0, 0x0, 0xfffffffd}]}) 23:27:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000340)="3416387460d5", 0x0, 0xf0b5d8f5, 0x0, 0x0, 0x0}) 23:27:25 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:25 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x1010) 23:27:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x330, 0xffffffff, 0x224, 0x224, 0x224, 0xffffffff, 0xffffffff, 0x344, 0x344, 0x344, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3b}, 0xffffff00, 0xffffff00, 'gretap0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0xbc, 0xfc, 0x0, {}, [@common=@unspec=@pkttype={{0x28, 'pkttype\x00'}, {0x9, 0xffffff01}}, @common=@ttl={{0x24, 'ttl\x00'}, {0x2, 0x7f}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2d, 0x1f}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x6, 0x0, 0x2, 0x4, 0x5], 0x5, 0x5}}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x38c) 23:27:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000000c0)) 23:27:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x21, 0x5, @buffer={0x0, 0x54, &(0x7f0000000000)=""/84}, &(0x7f0000000080)="e31fbe2f4a9dc6236efd9a601449d23832e0deee1cdc50ca6de66d2a5f1d32479a", &(0x7f0000000100)=""/60, 0x0, 0x0, 0x0, 0x0}) 23:27:25 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:25 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f00000052c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) 23:27:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0x0, 0x1}) 23:27:26 executing program 4: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf) 23:27:26 executing program 0: r0 = openat$tun(0xffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) 23:27:26 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)={[{@fat=@fmask={'fmask'}}]}) 23:27:26 executing program 4: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8953, 0x0) 23:27:28 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:28 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8905, &(0x7f0000000040)) 23:27:28 executing program 0: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:27:28 executing program 4: syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) 23:27:28 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 637.845875][T15567] FAT-fs (loop5): bogus number of reserved sectors [ 637.853396][T15567] FAT-fs (loop5): Can't find a valid FAT filesystem 23:27:28 executing program 5: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x180182) 23:27:28 executing program 3: syz_io_uring_setup(0x3f03, &(0x7f0000000300)={0x0, 0x0, 0x6}, &(0x7f00007ff000/0x800000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 23:27:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2f, 0x0, 0x0, 0x0, 0x0, {}, ["", "", "", ""]}, 0x2f}}, 0x0) 23:27:28 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r0, &(0x7f0000000080)="de", 0x1) write$P9_RLERROR(r0, 0x0, 0xba2db5094c16f7e4) 23:27:29 executing program 5: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8912, &(0x7f0000000040)) 23:27:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 23:27:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x4, 0x9, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) 23:27:31 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)) 23:27:31 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x4, 0x9, 0xfff}, 0x40) bpf$MAP_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, r0}, 0x38) 23:27:31 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000140)={0xf, 0x7, 0x0, {0x6, '\x13\xea\x15\xe2\xca\xf3\xe7g\xbf\x11\xd3\xe2\xdcGU\xe4V\x8fZ\x8d\xabW-Z\x8e\a=\x8dm/\xe2\t\xe6\x19.J\xd1\xdaj\x1d\xa6I\x01T\b\x05\xfc\xe4|\xf9\xee\xe8_\x1c\xf2\xbd\xdc\xf0O\x82\xdf9\xbfw#o\xb7n\x00:\rW\xfbd\xbc\x1e\xdfo\x1f\xdfU\b\xbc\xde\xa9\xc6\x97!i\x02c\reI~\xdb\xe7\xc9\xb6\xc4ju\xfb\xf6\xc1\xb5\xc5C&KJ\xc7\xcd\xa2\x13\x83q\xf5\x9b\xcf`\x10\x80\xb1v&\'\x1b\x05\xfa2+\xc2\xfbz+\x12\xb4dWiE\xde\xc2\x8d\x86;jZ\xae\x1d\x19\xa33\xfd\xe5Q\x12\xe0\"u\x1c\xf0:J\xd1\x8alV\xab\x128\x8c\xa0?\x88:Q%%\xce\x02U\x16gU\x9f*\x8e\x80\xb8\x98\r`*\xeb\x84`\xd8\xb2\x14\xad\xb5\xf7\x1f\xec\x94q\xc5y\x7f\xeb\xf4?=?\xa7\x05NH\xb5y\x97\x19s\xe6'}}, 0xba2db5094c16f7e4) read$FUSE(r0, &(0x7f0000004500)={0x2020}, 0x2020) 23:27:31 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4002, 0x0) 23:27:31 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:32 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x4003, 0x9, 0xfff, 0xc}, 0x40) 23:27:32 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x4, 0x9, 0xfff}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x700}, 0x38) 23:27:32 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x4, 0x9, 0xfff}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x24, r0}, 0x38) 23:27:32 executing program 5: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8983, &(0x7f0000000040)) 23:27:33 executing program 0: syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8}, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 23:27:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @scatter={0x2000, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}]}, &(0x7f0000000340)="3416387460d5", &(0x7f0000000400)=""/221, 0x0, 0x0, 0x0, 0x0}) 23:27:35 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) 23:27:35 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RLERROR(r0, &(0x7f0000000140)={0xf, 0x7, 0x0, {0x6, '\x13\xea\x15\xe2\xca\xf3\xe7g\xbf\x11\xd3\xe2\xdcGU\xe4V\x8fZ\x8d\xabW-Z\x8e\a=\x8dm/\xe2\t\xe6\x19.J\xd1\xdaj\x1d\xa6I\x01T\b\x05\xfc\xe4|\xf9\xee\xe8_\x1c\xf2\xbd\xdc\xf0O\x82\xdf9\xbfw#o\xb7n\x00:\rW\xfbd\xbc\x1e\xdfo\x1f\xdfU\b\xbc\xde\xa9\xc6\x97!i\x02c\reI~\xdb\xe7\xc9\xb6\xc4ju\xfb\xf6\xc1\xb5\xc5C&KJ\xc7\xcd\xa2\x13\x83q\xf5\x9b\xcf`\x10\x80\xb1v&\'\x1b\x05\xfa2+\xc2\xfbz+\x12\xb4dWiE\xde\xc2\x8d\x86;jZ\xae\x1d\x19\xa33\xfd\xe5Q\x12\xe0\"u\x1c\xf0:J\xd1\x8alV\xab\x128\x8c\xa0?\x88:Q%%\xce\x02U\x16gU\x9f*\x8e\x80\xb8\x98\r`*\xeb\x84`\xd8\xb2\x14\xad\xb5\xf7\x1f\xec\x94q\xc5y\x7f\xeb\xf4?=?\xa7\x05NH\xb5y\x97\x19s\xe6'}}, 0xba2db5094c16f7e4) write$P9_RLINK(r0, &(0x7f0000000040)={0x7}, 0x7) 23:27:35 executing program 3: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="9a", 0x1, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="9a", 0x1, 0xfffffffffffffffd) 23:27:35 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 23:27:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:27:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)=ANY=[]) r1 = openat$cuse(0xffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_STATFS(r1, 0x0, 0x0) 23:27:36 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x80000000}, 0x8) 23:27:36 executing program 0: r0 = socket$inet(0x2, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8946, &(0x7f0000000040)) 23:27:37 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x15}]}) 23:27:37 executing program 4: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5452, 0x0) 23:27:38 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:38 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00', r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x1}, 0x14}}, 0x0) 23:27:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000040)=ANY=[@ANYBLOB="c2"]) 23:27:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 23:27:38 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:38 executing program 4: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x2e4, 0xffffffff, 0x170, 0x170, 0x94, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'veth1_vlan\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00'}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'bond0\x00', 'wg0\x00'}, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x2c, 'connmark\x00'}}, @common=@ah={{0x2c, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x340) 23:27:39 executing program 4: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5452, &(0x7f0000000040)) 23:27:39 executing program 0: r0 = socket$inet(0x2, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5452, &(0x7f0000000040)) 23:27:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000000, 0x0}, &(0x7f0000000340)="3416387460d5", 0x0, 0x0, 0x0, 0x0, 0x0}) 23:27:39 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x28, 0x0, 0x0, 0xfffff000}]}) 23:27:40 executing program 3: syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000000)={[{@utf8='utf8'}]}) 23:27:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x9}, {0x6}]}) [ 650.185436][T15724] ISOFS: Unable to identify CD-ROM format. [ 650.409378][ T34] audit: type=1326 audit(1617838060.889:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15723 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f9d549 code=0x0 [ 650.436523][T15724] ISOFS: Unable to identify CD-ROM format. 23:27:42 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40046607, &(0x7f0000000140)={0x7ff00}) 23:27:42 executing program 0: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x890d, 0x0) 23:27:42 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44841}, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x5452, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd9d8, 0x0, 0xd0e0000, 0x1ac, 0x100, 0x1ac, 0x1d8, 0x1d8, 0x1ac, 0x1d8, 0x4, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00'}, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@private, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x29c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) 23:27:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) 23:27:42 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:27:42 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:27:43 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) 23:27:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x4, 0x9, 0xfff}, 0x40) 23:27:43 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func={0x3}, @typedef]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000140)=""/161, 0x36, 0xa1, 0x8}, 0x20) [ 653.248368][ T34] audit: type=1326 audit(1617838063.729:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15761 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6c549 code=0x0 23:27:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x5452, &(0x7f0000000540)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 654.049616][ T34] audit: type=1326 audit(1617838064.529:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15761 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6c549 code=0x0 [ 654.538436][T15773] xt_CT: You must specify a L4 protocol and not use inversions on it 23:27:45 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:45 executing program 5: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x43000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:27:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11115a171a94a3a6, 0x0) 23:27:46 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44841}, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x5452, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd9d8, 0x0, 0xd0e0000, 0x1ac, 0x100, 0x1ac, 0x1d8, 0x1d8, 0x1ac, 0x1d8, 0x4, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00'}, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@private, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x29c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) 23:27:46 executing program 4: bpf$OBJ_PIN_MAP(0x14, &(0x7f0000000040)={0x0}, 0x10) 23:27:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x11, 0x5, @buffer={0x0, 0x54, &(0x7f0000000000)=""/84}, &(0x7f0000000080)="e31fbe2f4a9dc6236efd9a601449d23832", &(0x7f0000000100)=""/60, 0x0, 0x0, 0x0, 0x0}) 23:27:46 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:46 executing program 0: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000040)) 23:27:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_DEBUG(r0, 0x2275, &(0x7f0000000200)=0xfdfdffff) 23:27:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x1}, 0x40) 23:27:47 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000140)) 23:27:47 executing program 5: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8924, &(0x7f0000000040)) 23:27:48 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) 23:27:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x4, 0x9, 0xfff}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f0000000200), 0x24, r0}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 23:27:49 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44841}, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x5452, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd9d8, 0x0, 0xd0e0000, 0x1ac, 0x100, 0x1ac, 0x1d8, 0x1d8, 0x1ac, 0x1d8, 0x4, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00'}, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@private, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x29c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) 23:27:49 executing program 4: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:27:49 executing program 5: r0 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000540)=ANY=[]) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) getdents(r0, &(0x7f00000002c0)=""/120, 0x78) getdents(r0, 0x0, 0x0) [ 658.946800][T15802] xt_CT: You must specify a L4 protocol and not use inversions on it [ 659.066162][T15833] loop5: detected capacity change from 264192 to 0 [ 659.097442][T15833] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:27:50 executing program 0: syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)=@req={0x20, &(0x7f00000001c0)={'syz_tun\x00', @ifru_mtu}}) r0 = request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='/dev/sg#\x00', 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='!-@\x02\x00', r0) 23:27:50 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:50 executing program 5: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5451, 0x0) 23:27:50 executing program 4: r0 = socket$inet(0x2, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8902, &(0x7f0000000040)) 23:27:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) r1 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x5411, &(0x7f0000000040)) 23:27:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 23:27:51 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:51 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000080000000000000000000003"], &(0x7f0000000100)=""/131, 0x48, 0x83, 0x1}, 0x20) 23:27:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x4004700c, 0x0) 23:27:52 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44841}, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x5452, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd9d8, 0x0, 0xd0e0000, 0x1ac, 0x100, 0x1ac, 0x1d8, 0x1d8, 0x1ac, 0x1d8, 0x4, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth0_macvtap\x00'}, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@private, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x29c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) 23:27:52 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000021c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @scatter={0x2, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}]}, &(0x7f0000000340)="3416387460d5", 0x0, 0x0, 0x0, 0x0, 0x0}) 23:27:52 executing program 4: r0 = socket$inet(0x2, 0x3, 0x4) recvfrom(r0, 0x0, 0x0, 0x40000102, 0x0, 0x0) 23:27:52 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) [ 661.998584][T15853] xt_CT: You must specify a L4 protocol and not use inversions on it 23:27:54 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:54 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20002002}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 23:27:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2f, 0x0, 0x0, 0x0, 0x0, {}, ["", "", "", ""]}, 0xc0}}, 0x0) 23:27:54 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000008000000000000000000000300000000040000000e040000000100000000302e00002e"], &(0x7f0000000100)=""/131, 0x48, 0x83, 0x1}, 0x20) 23:27:54 executing program 4: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 23:27:54 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:54 executing program 0: r0 = socket$inet6(0x2, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 23:27:54 executing program 5: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000100)={0x0, "1ab9772900adb935fa8805df22fa63fddaacc8a68ace7f0b27431d857c47ed7b2ae2d3326bf51be1f3cf53425522af59d04172d06c518fa5d092af24900848b5"}, 0x48, 0xfffffffffffffffd) 23:27:55 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) [ 664.499316][T15895] xt_CT: You must specify a L4 protocol and not use inversions on it 23:27:55 executing program 3: syz_read_part_table(0x0, 0x2, &(0x7f0000001440)=[{&(0x7f0000000040)="be", 0x1, 0x8001}, {&(0x7f0000000180)="c2", 0x1, 0x542d239d}]) 23:27:55 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000020c0)='9p\x00', 0x0, &(0x7f0000002480)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [{@audit='audit', 0x22}]}}) 23:27:55 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, @sco, @vsock={0x28, 0x0, 0x0, @hyper}, @vsock={0x28, 0x0, 0x0, @hyper}}) [ 664.990355][T15937] loop3: detected capacity change from 232739 to 0 [ 665.132846][T15937] loop3: detected capacity change from 232739 to 0 [ 665.414168][T15946] 9pnet: Insufficient options for proto=fd [ 665.428540][T15946] 9pnet: Insufficient options for proto=fd 23:27:56 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:56 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8949, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:27:56 executing program 4: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',blksize=0x0000000000000c00,dont_measure,obj_user=$\\\',mask=^MAY_EXEC,context']) 23:27:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8912, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:27:56 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x208301) write$evdev(r0, 0x0, 0x0) [ 666.472343][T15962] fuse: blksize only supported for fuseblk [ 666.488417][T15962] fuse: blksize only supported for fuseblk 23:27:57 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000000260001"], 0x64}}, 0x0) 23:27:57 executing program 5: timer_create(0x0, &(0x7f0000000380)={0x0, 0x0, 0x2, @thr={0x0, 0x0}}, 0x0) 23:27:57 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000dc0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "c9512a", 0xc, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 23:27:57 executing program 0: rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x8000000) [ 667.198415][T15972] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 23:27:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23:27:57 executing program 3: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000080)='K', 0x1, 0xfffffffffffffffb) 23:27:59 executing program 5: syz_emit_ethernet(0x14, &(0x7f0000000000)={@local, @local, @val={@void}, {@generic={0x800, "13a2"}}}, 0x0) 23:27:59 executing program 4: r0 = socket$inet6(0x2, 0x3, 0xff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 23:27:59 executing program 3: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 23:27:59 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:27:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[{0x10, 0x1}], 0x10}, 0x0) 23:28:00 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:00 executing program 5: timer_create(0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 23:28:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001e0001"], 0x64}}, 0x0) 23:28:00 executing program 4: r0 = fsopen(&(0x7f0000003100)='cpuset\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 23:28:00 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x6, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 670.063838][T16014] new mount options do not match the existing superblock, will be ignored [ 670.084757][T16015] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 23:28:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000044, 0x0) 23:28:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000000120001"], 0x64}}, 0x0) 23:28:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8941, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 23:28:00 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000004c0)='gretap0\x00') [ 670.766233][T16027] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 23:28:02 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:02 executing program 3: setuid(0xee01) syz_read_part_table(0x0, 0x2, &(0x7f0000001440)=[{&(0x7f0000000040)="be", 0x1, 0x8001}, {&(0x7f0000000180)="c2", 0x1, 0x542d239d}]) 23:28:02 executing program 4: mincore(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0) 23:28:02 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8995, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 23:28:02 executing program 0: prlimit64(0x0, 0xb, &(0x7f0000000180), 0x0) timer_create(0x0, 0x0, 0x0) 23:28:02 executing program 4: syz_emit_ethernet(0xe81, &(0x7f00000000c0)={@dev, @broadcast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fd60a9", 0xe47, 0x2f, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {{}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "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"}}}}}}}, 0x0) 23:28:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000002d00010028bd7000ffdbdf2500000000", @ANYBLOB="07000400f3"], 0x64}}, 0x0) [ 672.757596][T16053] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 23:28:03 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f00000020c0)='9p\x00', 0x0, 0x0) 23:28:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4a, 0x0, 0x0) 23:28:03 executing program 0: r0 = epoll_create1(0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) 23:28:03 executing program 3: syz_emit_ethernet(0x20000d8e, &(0x7f0000000d80)={@link_local, @dev, @void}, 0x0) [ 673.295635][T16061] 9pnet_virtio: no channels available for device ./file0 23:28:05 executing program 5: syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) syz_mount_image$fuse(0x0, &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 23:28:05 executing program 4: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/117, 0x75}], 0x1, &(0x7f0000001700)=[{0x0}, {&(0x7f0000000680)=""/4096, 0x1000}, {0x0}], 0x3, 0x0) 23:28:05 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0xffffffff, 0x130, 0x330, 0x0, 0xffffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x130}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'ip6_vti0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:hugetlbfs_t:s0\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'wg1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 23:28:05 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:05 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x0}) 23:28:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000002d00010028bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="07000400f3fff3ffff"], 0x64}}, 0x0) 23:28:05 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000001700)='./file0\x00', 0x0) 23:28:05 executing program 0: socketpair(0x28, 0x0, 0x5, &(0x7f0000000180)) [ 675.572577][T16089] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 23:28:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3c, 0x0, 0x0) 23:28:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x17, 0x0, 0x0) 23:28:06 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_xen(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000440)={'trans=xen,', {[{@version_L='version=9p2000.L'}], [{@seclabel='seclabel'}, {@fsname={'fsname', 0x3d, '\x00'}}]}}) 23:28:06 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000180)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) [ 676.430051][T16107] 9pnet: Could not find request transport: xen 23:28:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000002900)={'syztnl0\x00', 0x0}) 23:28:07 executing program 0: sendto$inet6(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 23:28:09 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x541b, 0x0) 23:28:09 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x8000000) ustat(0x4, &(0x7f0000000040)) 23:28:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89a0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_dump}) 23:28:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x1c, &(0x7f0000000040)={0x2, 0x4e20, 0x7ffff000, @ipv4={[], [], @multicast1}}, 0x1c) 23:28:09 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x11, 0xa, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0x1a0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 23:28:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e24, 0x7fffffff, @ipv4}, 0x1c) 23:28:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180)=0x3, 0x4) 23:28:09 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000f80)={0x18, 0x2, {0x1, @remote}}, 0x1e) 23:28:10 executing program 0: r0 = socket(0x2, 0xa, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009240)={&(0x7f0000000080), 0xc, &(0x7f0000009200)={0x0}}, 0x0) 23:28:10 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000000d80)={@link_local, @dev, @void}, 0x0) 23:28:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'sit0\x00', @ifru_addrs=@sco={0x1f, @none}}) 23:28:11 executing program 5: perf_event_open(&(0x7f0000001b80)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x541b, 0x0) 23:28:11 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:11 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23:28:12 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 23:28:12 executing program 0: socket$inet6(0x2, 0x3, 0xff) 23:28:12 executing program 5: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)) 23:28:12 executing program 3: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',\n']) 23:28:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x1, 0x0, 0x0) [ 682.487782][T16181] fuse: Unknown parameter ' [ 682.487782][T16181] ' [ 682.557255][T16181] fuse: Unknown parameter ' [ 682.557255][T16181] ' 23:28:13 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89b1, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:28:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8930, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:28:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) 23:28:13 executing program 5: r0 = socket$inet6(0x2, 0x3, 0xff) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 23:28:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000100)=@tipc, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[{0x10, 0x1}], 0x10}, 0x0) 23:28:15 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x41, 0x0, 0x0) 23:28:15 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xf0, &(0x7f0000000080)=""/240, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:28:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xa1c, &(0x7f0000000040)={0x2, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 23:28:15 executing program 4: r0 = epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20002006, 0x3}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) 23:28:15 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4a, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23:28:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8981, 0x0) 23:28:15 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 23:28:15 executing program 3: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',blksize=0x0000000000000c00,dont_measure,obj_user=$\\\',mask=^MAY_EXEC,context\"']) [ 685.753691][T16241] fuse: blksize only supported for fuseblk [ 685.770335][T16241] fuse: blksize only supported for fuseblk 23:28:16 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x40000114) 23:28:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x1a}, 0x40) 23:28:18 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) 23:28:18 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 23:28:18 executing program 4: r0 = fsopen(&(0x7f0000003100)='cpuset\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000140)='cpuset\x00', 0x0, r1) 23:28:18 executing program 0: request_key(&(0x7f00000002c0)='trusted\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000480)='id_legacy\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 23:28:18 executing program 5: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6256}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:28:18 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 687.710112][T16266] new mount options do not match the existing superblock, will be ignored [ 687.789488][T16266] new mount options do not match the existing superblock, will be ignored 23:28:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_dump}) 23:28:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2d, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23:28:18 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8901, 0x0) 23:28:18 executing program 4: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',blksize=0x0000000000000c00,dont_measure,obj_user=$\\\',mask=^MAY_EXEC,context=s\"aff_u,smackfs']) [ 688.472991][T16279] fuse: blksize only supported for fuseblk [ 688.489430][T16279] fuse: blksize only supported for fuseblk 23:28:19 executing program 5: timer_create(0x0, &(0x7f0000000880)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000008c0)) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000980)={{0x77359400}, {0x0, r0+10000000}}, &(0x7f00000009c0)) 23:28:19 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x0) 23:28:20 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) 23:28:20 executing program 4: timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4, @thr={&(0x7f0000000000), 0x0}}, 0x0) 23:28:20 executing program 3: setuid(0xee01) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 23:28:20 executing program 5: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cr0], 0x1) perf_event_open(&(0x7f0000001b80)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:20 executing program 0: request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0) 23:28:20 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:20 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x1c5080, 0x0) 23:28:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:28:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8941, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:28:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33fe0}}, 0x0) 23:28:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x1, &(0x7f0000000040)=@raw=[@ldst], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x1d, &(0x7f00000000c0)=""/29, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:28:21 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000001340)=[{&(0x7f0000000280)="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", 0x1fb, 0x5}], 0x0, &(0x7f00000013c0)) [ 691.638147][T16319] loop4: detected capacity change from 1 to 0 [ 691.709055][T16319] FAT-fs (loop4): invalid media value (0xc8) [ 691.715725][T16319] FAT-fs (loop4): Can't find a valid FAT filesystem [ 691.907377][T16319] loop4: detected capacity change from 1 to 0 [ 691.941551][T16319] FAT-fs (loop4): invalid media value (0xc8) [ 691.948132][T16319] FAT-fs (loop4): Can't find a valid FAT filesystem 23:28:23 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) 23:28:23 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@multicast, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, {0x0, 0x0, 0x0, @remote}}}}}, 0x0) 23:28:23 executing program 5: mknodat$null(0xffffffffffffffff, 0x0, 0x2000, 0x103) 23:28:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x23, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0xffffffff, 0x130, 0x330, 0x0, 0xffffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'ip6_vti0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:hugetlbfs_t:s0\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'wg1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3) 23:28:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x12001) 23:28:23 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8929, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 23:28:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x114}, 0x40) 23:28:23 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x224000, 0x800}, 0x20) 23:28:23 executing program 4: write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 23:28:24 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8942, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:28:24 executing program 0: unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200) [ 694.176532][ T3119] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.184646][ T3119] ieee802154 phy1 wpan1: encryption failed: -22 23:28:26 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 23:28:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) 23:28:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000bc0)=@deltaction={0x14, 0x31, 0x1ca39878f6633247}, 0x14}}, 0x0) 23:28:26 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x8000000) 23:28:26 executing program 0: socket(0xa, 0x1, 0xffff) 23:28:26 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4840, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) 23:28:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000180)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x0) 23:28:26 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000dc0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "c9512a", 0xc, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[], {0x0, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 23:28:26 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8931, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:28:27 executing program 3: timer_create(0x0, 0x0, &(0x7f0000001200)) timer_gettime(0x0, &(0x7f0000001240)) 23:28:27 executing program 0: sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast, 0x0, 0x0, 0x4}}]}]}, 0x30}}, 0x0) syz_mount_image$erofs(&(0x7f0000000180)='erofs\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffff0700, 0xaaaaaaaaaaaab31, &(0x7f0000000300)=[{&(0x7f0000000200)="b81c86b62c9ffdf9d942fabab24ce39f5f7da39703e05bf34849195b814ef968aaaa689ffa07d24e7d37eb1ea2f1a1", 0x2f, 0x5}, {&(0x7f0000000240)="339271fe47ead4d50831e82b6556e5c03440ad62618045916fd9eb528e6b9fc32ff61acb87fcd55fe1c1b5d9939c691e19409dbdb8b7eb62edfc71d9a07e532ec008fdef00ca59d8fcf3bbfd60196e6c402397cb373f149a266ce60428810000672cd60e14d68e52017a0e8c47609d76f47041d5ff6b05afff07504abe48dab1748ae641c7731f63f88fbcdea1fb81c4b65dceb66910056a147b2ff8c8c889646b5e89be923c47fe3c8bb8994dbcda9cb508dc25c471e403b93c7e", 0xbb, 0x8}], 0x900, &(0x7f0000000540)={[], [{@audit='audit'}, {@dont_measure='dont_measure'}, {@obj_type={'obj_type', 0x3d, '6dv/hwrng\x00'}}, {@obj_type={'obj_type', 0x3d, '/dev/ion\x00'}}, {@permit_directio='permit_directio'}, {@measure='measure'}, {@fowner_gt={'fowner>', 0xee01}}]}) 23:28:29 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 23:28:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 23:28:29 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x201) write$tun(r0, &(0x7f0000000040)={@void, @void, @arp=@generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @broadcast}}, 0x8800000) write$tun(r0, &(0x7f0000000e00)={@val={0x0, 0x6006}, @val={0x0, 0x0, 0x0, 0x0, 0x8}, @ipv4=@igmp={{0xb, 0x4, 0x3, 0x39, 0x34, 0x64, 0x0, 0x97, 0x2, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4}, @rr={0x7, 0x7, 0x0, [@multicast2]}, @lsrr={0x83, 0xb, 0x0, [@private=0xa010102, @private]}, @generic={0x89, 0x2}]}}, {0x0, 0x0, 0x0, @multicast1}}}, 0x42) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5a0, 0xf0, 0x230, 0x358, 0x358, 0xf0, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, [], 0x2d}, [0x0, 0x0, 0xff, 0xffffff00], [0x0, 0x0, 0xffff00, 0xffffff00], 'wg2\x00', 'tunl0\x00', {0xff}, {}, 0x2f, 0xff}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4=@multicast1, 0x0, 0x2c}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private, @ipv4=@remote}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x2}}, @common=@srh={{0x30, 'srh\x00'}, {0x33, 0x2}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@ipv6={@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1={0xfc, 0x1, [], 0x1}, [0x0, 0xffffffff, 0xff], [], 'veth1_to_bond\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) 23:28:29 executing program 5: socket$netlink(0x10, 0x3, 0x1a) 23:28:29 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000001440)=[{&(0x7f0000000180)="c2", 0x1, 0x542d239d}]) 23:28:29 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:30 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x7}, 0x20) 23:28:30 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2, &(0x7f0000000040)=@raw=[@initr0], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:28:30 executing program 5: lstat(&(0x7f0000000340)='./file0/file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000002880)='./file0/file0\x00', 0x0, 0x0, 0x0) 23:28:30 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x502, 0x0) 23:28:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) 23:28:31 executing program 3: add_key(&(0x7f0000000000)='keyring\x00', 0x0, &(0x7f0000000080)="18", 0x1, 0xfffffffffffffffb) 23:28:32 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 23:28:32 executing program 0: syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9, 0x0) 23:28:32 executing program 4: r0 = perf_event_open(&(0x7f0000001b80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 23:28:32 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0)='batadv\x00', r0) 23:28:32 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0x1c040, 0x0) 23:28:32 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) 23:28:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_mreq(r0, 0x29, 0xffffffe0, 0x0, 0x0) 23:28:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5411, 0x0) 23:28:33 executing program 4: perf_event_open(&(0x7f0000001b80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8982, 0x0) 23:28:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 23:28:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x5460, 0x0) [ 703.883472][T16469] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:28:35 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 23:28:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0}, 0x4841) 23:28:35 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x4) 23:28:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23:28:35 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffff8001}) 23:28:35 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) 23:28:35 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, 0x0) 23:28:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 23:28:36 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000200)) 23:28:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8942, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) [ 705.915817][T16493] overlayfs: missing 'lowerdir' 23:28:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000100)=@ax25={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x80) 23:28:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x408c4) 23:28:38 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 23:28:38 executing program 0: mount$9p_unix(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 23:28:38 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8971, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:28:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0xffffffff, 0x130, 0x330, 0x0, 0xffffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x450}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'ip6_vti0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:hugetlbfs_t:s0\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'wg1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 23:28:38 executing program 5: perf_event_open(&(0x7f0000001b80)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:38 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) 23:28:38 executing program 5: openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ashmem\x00', 0x840c0, 0x0) 23:28:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8914, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 23:28:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x11, 0x4, 0x0, 0x0) 23:28:38 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000009, 0xa6832, 0xffffffffffffffff, 0x8000000) 23:28:39 executing program 5: add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x2, 0xfffffffffffffffc) 23:28:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:28:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8913, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 23:28:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001e00010028bd7000ff", @ANYRES32=0x0, @ANYBLOB='\a'], 0x64}}, 0x0) 23:28:41 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 23:28:41 executing program 5: syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x0, 0x0) 23:28:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x23, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0xffffffff, 0x130, 0x330, 0x0, 0xffffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'ip6_vti0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:hugetlbfs_t:s0\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'wg1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x20000e60) 23:28:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8907, 0x0) 23:28:41 executing program 0: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',blksize=\n']) 23:28:41 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, 0x0, 0x0) 23:28:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8912, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 23:28:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000004100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f0, 0x2e8, 0x2e8, 0x98, 0x250, 0x2e8, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'bridge_slave_1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'wlan0\x00', 'virt_wifi0\x00'}, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'wlan0\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) 23:28:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x31, 0x0, 0x0) [ 711.651783][T16568] fuse: Bad value for 'blksize' [ 711.698951][T16568] fuse: Bad value for 'blksize' 23:28:42 executing program 5: r0 = socket$inet6(0x2, 0xa, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x161, 0x0, 0x24) 23:28:42 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) [ 712.682511][T11366] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 713.043683][T11366] usb 5-1: unable to get BOS descriptor or descriptor too short 23:28:43 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) 23:28:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000000)=@ethtool_eee={0x44}}) 23:28:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x20000998, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23:28:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xf0, &(0x7f0000000080)=""/240, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0), 0x10}, 0x78) [ 713.122796][T11366] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 713.131906][T11366] usb 5-1: can't read configurations, error -71 23:28:44 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8991, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:28:44 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x11, 0xb, &(0x7f0000000bc0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'tunl0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'vlan1\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 23:28:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8921, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:28:44 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x0, 0x0) [ 713.842392][T11366] usb 5-1: new high-speed USB device number 5 using dummy_hcd 23:28:44 executing program 1: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/117, 0x75}, {0x0}, {&(0x7f0000000280)=""/213, 0xd5}], 0x3, &(0x7f0000001700)=[{&(0x7f00000004c0)=""/143, 0x8f}, {&(0x7f0000000680)=""/4096, 0x1000}, {0x0}], 0x3, 0x0) 23:28:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x114, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) [ 714.242690][T11366] usb 5-1: unable to get BOS descriptor or descriptor too short [ 714.332691][T11366] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 714.340444][T11366] usb 5-1: can't read configurations, error -71 23:28:44 executing program 4: mount$9p_fd(0x1000000, 0x0, 0x0, 0x0, 0x0) [ 714.395765][T11366] usb usb5-port1: attempt power cycle 23:28:45 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:45 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0xd}, 0x10) 23:28:45 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x35, 0x0, 0x0) 23:28:45 executing program 1: add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0) 23:28:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @func]}}, &(0x7f00000004c0)=""/4096, 0x3e, 0x1000, 0x1}, 0x20) 23:28:45 executing program 4: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',blksize=0x0000000000000c00,dont_measure,obj_user=$\\\',mask=^MAY_EXEC,context=s\"aff_u,smackfsfl']) [ 715.602506][T16630] fuse: blksize only supported for fuseblk [ 715.617120][T16630] fuse: blksize only supported for fuseblk 23:28:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "56a694f49e07da5136e61dfb478f69428c9a71829a5d13155519d5e58e218670", "4af24a827c93be2b75601ade50dea2669944d11d0dc339e16ab59738d4c77967", "c9deb40db601d7cd9355b7bc27d84ef9200dbb623d8d1f92db02eec9580b4c0c", "03f3a6dc88cc992943b06cd975fa5200fcc2c5f373acc1c810725003d8489368", "a7076143fa9e616ee59d597498604507e3450a1d5c9cf357f2f4f045b957b0b6", "7f8cd54b1c9b3a0ad7229bc6"}}) 23:28:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) recvmmsg(r0, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000001800)=""/121, 0x79}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000042c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X'], 0x58}}, 0x0) 23:28:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8910, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 23:28:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast1, 0x2}, 0x1c) 23:28:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x88, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23:28:47 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x0, &(0x7f0000000580)={'trans=rdma,', {'port'}}) 23:28:48 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 23:28:48 executing program 3: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',blksize=0x0000000000000c00,dont_measure,obj_user=$\\\',mask=^MAY_EXEC,context=st\"ff_u,smackfs']) 23:28:48 executing program 0: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',blksize=+']) 23:28:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40821, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev}, 0x1c) 23:28:48 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) [ 717.708763][T16659] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 717.753525][T16660] fuse: blksize only supported for fuseblk [ 717.776478][T16661] fuse: Bad value for 'blksize' [ 717.795012][T16661] fuse: Bad value for 'blksize' [ 717.812221][T16660] fuse: blksize only supported for fuseblk 23:28:48 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8907, 0x0) 23:28:48 executing program 1: syz_emit_ethernet(0x84, &(0x7f0000000080)={@multicast, @link_local, @val={@void}, {@mpls_uc={0x8847, {[], @ipv6=@tipc_packet={0x0, 0x6, "ec64c6", 0x4a, 0x6, 0x0, @remote, @private1, {[@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@dev]}, @dstopts], @payload_named={{{{{0x2a, 0x0, 0x1, 0x0, 0x0, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x2}}}, [0x0, 0x0]}}}}}}}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x9f) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x201) write$tun(r0, &(0x7f0000000040)={@void, @void, @arp=@generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @broadcast}}, 0x8800000) write$tun(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) 23:28:48 executing program 3: r0 = add_key(&(0x7f0000000480)='id_legacy\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='%*(}\x00', r0) 23:28:48 executing program 0: r0 = fsopen(&(0x7f0000003100)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 23:28:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:49 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x0, &(0x7f0000000580)={'trans=rdma,', {'port'}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, '}]*!#&-.\'[,.\\'}}]}}) 23:28:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40800, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) 23:28:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1d, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23:28:50 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 23:28:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "b2648d"}}) 23:28:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8936, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:28:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0xffffffff, 0x130, 0x330, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0x450, 0x450, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'ip6_vti0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:hugetlbfs_t:s0\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'wg1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 23:28:50 executing program 4: syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x4024, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 23:28:50 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000d80)={@remote, @link_local, @void, {@llc_tr={0x11, {@llc={0x0, 0x0, '6'}}}}}, 0x0) 23:28:50 executing program 3: socket$netlink(0x10, 0x3, 0xb) 23:28:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:50 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc041, 0x0) 23:28:51 executing program 1: syz_emit_ethernet(0x81, &(0x7f0000000dc0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "c9512a", 0x4b, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[], {0x0, 0x0, 0x4b, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "69520b302292664c8c1619b08301bf664ac78f3a9c2903dfcf29b20eaf24962dee5a372e132dd66a6a3e2a41eb8fd750ecc11ba225806f3c0a9fbd54ae51c0"}}}}}}}, 0x0) 23:28:51 executing program 3: syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x1, 0x0) 23:28:51 executing program 5: socket$inet6(0xa, 0x3, 0x3a) 23:28:52 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000f1dff8)={0x0, r3}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0b}, 0x24}}, 0x0) 23:28:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, 0x0, 0x0) 23:28:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, 0x0) 23:28:52 executing program 5: socketpair(0xa, 0x5, 0x10000, &(0x7f00000000c0)) 23:28:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='d'], 0x64}, 0x8}, 0x0) 23:28:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x11, 0x67, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23:28:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) 23:28:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x15, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23:28:53 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8941, 0x0) 23:28:53 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, 0x0) 23:28:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3b, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23:28:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8911, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 23:28:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000bc0)=@deltaction={0x34, 0x31, 0x1ca39878f6633247, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x34}}, 0x0) 23:28:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:28:54 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') 23:28:54 executing program 4: r0 = epoll_create1(0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000a40)) 23:28:54 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 23:28:54 executing program 2: syz_emit_ethernet(0x48, &(0x7f0000000dc0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "c9512a", 0x12, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[], {0x0, 0x0, 0x12, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "69520b302292"}}}}}}}, 0x0) 23:28:55 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20000000) 23:28:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:28:55 executing program 1: timer_create(0x2, 0x0, &(0x7f00000012c0)) 23:28:55 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) 23:28:55 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 23:28:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x20000102) 23:28:56 executing program 0: syz_emit_ethernet(0xe8, &(0x7f0000000080)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void}, {@mpls_uc={0x8847, {[{}, {0x7}, {}], @ipv6=@tipc_packet={0x0, 0x6, "ec64c6", 0xa2, 0x6, 0x0, @remote, @private1, {[@fragment={0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0x64}, @srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x14, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @dev, @private2]}, @srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x28}, @dstopts={0x1d, 0x1, [], [@jumbo, @pad1]}, @hopopts={0x1d}], @payload_named={{{{{0x2a, 0x0, 0x1, 0x0, 0x0, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x2}, 0x2}}}, [0x0, 0x0]}}}}}}}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x9f) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x201) write$tun(r0, &(0x7f0000000040)={@void, @void, @arp=@generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @broadcast}}, 0x8800000) write$tun(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x40040) syz_open_dev$vcsu(0x0, 0x0, 0x180) 23:28:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0}) 23:28:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xe000, &(0x7f0000000040)={0x2, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) 23:28:56 executing program 1: request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) 23:28:56 executing program 5: add_key(&(0x7f0000000480)='id_legacy\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000200)={0x0, "9d0503af5a0de234d88767c341ff170220eef9ce51aa89f7e0272433dfea7b09fce5fc0cfa2551d306e8d1c3bd4289577312423b5791cbbdf4e2edac3408ebbb"}, 0x48, 0xfffffffffffffffd) 23:28:56 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8922, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:28:56 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="757070657264691b3d2e2f66696c65302c"]) 23:28:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000002e0001"], 0x64}}, 0x0) clock_gettime(0x0, &(0x7f0000005480)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, &(0x7f00000054c0)={0x0, r1+10000000}) 23:28:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x1c, &(0x7f0000000040)={0x2, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 23:28:56 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087703, 0x0) [ 726.333166][T16801] batadv_slave_0: mtu less than device minimum 23:28:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8918, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:28:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) [ 726.655630][T16805] overlayfs: unrecognized mount option "upperdi=./file0" or missing value 23:28:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000240)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) [ 726.917399][T16812] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 23:28:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 23:28:57 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x638e, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4, 0x10, r0, 0x8000000) 23:28:57 executing program 5: r0 = socket$inet6(0x2, 0x3, 0xff) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) 23:28:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1, 0x0) write$tun(r0, 0x0, 0x3a) 23:28:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x8}}}, 0x1c) [ 727.489000][T16824] raw_sendmsg: syz-executor.5 forgot to set AF_INET. Fix it! 23:28:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 727.651913][T16826] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 23:28:58 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8927, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:28:58 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5411, 0x0) 23:28:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1b, 0x0, 0x0) 23:28:58 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@fat=@allow_utime={'allow_utime'}}]}) 23:28:58 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(r0, 0x0, 0x0, 0x0) 23:28:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x11, 0xb, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23:28:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)='R', 0x1}], 0x1, &(0x7f0000000500)=[{0x10}], 0x10}, 0x0) 23:28:59 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x80000001}}]}) [ 728.581654][T16841] FAT-fs (loop2): bogus number of reserved sectors [ 728.590172][T16841] FAT-fs (loop2): Can't find a valid FAT filesystem [ 728.694927][T16841] FAT-fs (loop2): bogus number of reserved sectors [ 728.701593][T16841] FAT-fs (loop2): Can't find a valid FAT filesystem 23:28:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000000140001"], 0x64}}, 0x0) 23:28:59 executing program 1: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=',']) 23:28:59 executing program 0: add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) 23:28:59 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfeffffff, 0x8031, 0xffffffffffffffff, 0x8000000) 23:28:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:29:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_hsr\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x0, 0x7fff}}) 23:29:00 executing program 4: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',blksize=0x0000000000000c00,dont_measure,obj_user=$\\\',mask=^MAY_EXEC,context,']) [ 729.487735][T16867] FAT-fs (loop1): bogus number of reserved sectors [ 729.494716][T16867] FAT-fs (loop1): Can't find a valid FAT filesystem 23:29:00 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8904, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 729.648271][T16867] FAT-fs (loop1): bogus number of reserved sectors [ 729.655116][T16867] FAT-fs (loop1): Can't find a valid FAT filesystem 23:29:00 executing program 0: timer_create(0x0, 0x0, &(0x7f00000003c0)) timer_delete(0x0) 23:29:00 executing program 1: setuid(0xee01) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/pid_for_children\x00') 23:29:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x2) [ 730.048826][T16884] fuse: blksize only supported for fuseblk [ 730.101704][T16884] fuse: blksize only supported for fuseblk 23:29:00 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000d80)={@local, @link_local, @void, {@mpls_uc={0x8847, {[], @ipv6=@tipc_packet={0x0, 0x6, "ec64c6", 0x28, 0x6, 0x0, @remote, @private1, {[], @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}}}, 0x0) 23:29:00 executing program 4: r0 = socket(0x2, 0xa, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 23:29:00 executing program 3: timer_create(0x8acbb5c5224c28dd, 0x0, 0x0) 23:29:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)="8f", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) 23:29:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00.'], 0x64}, 0x8}, 0x0) 23:29:01 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000dc0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "c9512a", 0x14, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[@fragment], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 23:29:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000180)=@in={0x2, 0x0, @broadcast}, 0x80) 23:29:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001200)=[{0x0}, {&(0x7f00000001c0)="af", 0x1}], 0x2}, 0x0) 23:29:01 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_xen(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000440)={'trans=xen,'}) 23:29:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x14) 23:29:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)) 23:29:01 executing program 1: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x44003, 0x0) 23:29:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8902, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) [ 731.474585][T16912] 9pnet: Could not find request transport: xen 23:29:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000001b40), 0x0, &(0x7f0000001c40)={[{@fat=@showexec='showexec'}, {@fat=@tz_utc='tz=UTC'}]}) 23:29:02 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x39}}, 0x14) 23:29:02 executing program 2: process_vm_readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1, &(0x7f0000000980)=[{&(0x7f0000000680)=""/72, 0x48}], 0x1, 0x0) 23:29:02 executing program 0: timer_create(0x2, 0x0, &(0x7f00000012c0)) timer_delete(0x0) 23:29:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_hsr\x00', &(0x7f00000000c0)=@ethtool_sset_info}) [ 732.077722][T16923] FAT-fs (loop3): bogus number of reserved sectors [ 732.084600][T16923] FAT-fs (loop3): Can't find a valid FAT filesystem 23:29:02 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0xffffffffffffffff) [ 732.181453][T16923] FAT-fs (loop3): bogus number of reserved sectors [ 732.188260][T16923] FAT-fs (loop3): Can't find a valid FAT filesystem 23:29:02 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000001b80)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 23:29:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x23, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0xffffffff, 0x130, 0x330, 0x0, 0xffffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'ip6_vti0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:hugetlbfs_t:s0\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'wg1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 23:29:03 executing program 0: request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0) 23:29:03 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000001340)=[{&(0x7f0000000280)="1c588b3384413feaf3cf7e953023dbd7c83ab924ea59344b3e64bb972ef751d773d2dc0c604e3673b4ea4d3e60cc04cc41d1008a4624579c7bd355723698b6798d6bc70c37142c98968352ad152fe3c045732026fb0ec7d308788521a1cc40b049c725dfc7b52e907535da793728bca97f8ee483ea5caf962d786e4fad2a90d7e5d285b166cef53112afa23c05bc24d6bb11b7b8a0327f1686b8a2d30a12b4415a35967863b16d9f8515e365c55e8c3734366d80e7a07b1a885f49fd77ca5a9d088d54584af4b88e867bdc02630db983142eb9c4a9d50c29b7f02bc30cb5465f12a67017157824dab93d0cac206ae9b684458b20db66ea5d518df7b741e98fe16996a3c81ed53dd101bfd35e2e94339571208cd6127637c50957a286acbc4a8077dce5ad4cedc14eccee16559555895ef89ea748191a05abc4b50df5ceadbad20fb8e8d8c7ed5c7c3e3c4631da2a8df69c7c082b398cc3b41675c946c66233def1fab63445a33f18316c68b8a0936cef3936c4b292ad74ef8fbf233ad3c6ea5bd5d502e0dbddc1105824535f4733f90b792f680d589fd741ba8a89988eac756d114b081aaa4114426415e5931ff6995c9a1e9f589728481d56e70754811c81ff612fa84f4936ed009c5b564cfab616e69669bd1613456946abcf2f88956088c6c2b5094bf02f3555fbf31d4fa67de0144c72b0d50fe0bbdf52fe3e", 0x1fb, 0x5}], 0x8000, &(0x7f00000013c0)={[{@fat=@fmask={'fmask'}}]}) 23:29:03 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x4401) 23:29:03 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890c, 0x0) 23:29:03 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ece859", 0x14, 0x6, 0x0, @private0, @mcast1, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 733.047786][T16950] loop4: detected capacity change from 1 to 0 23:29:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xe010, &(0x7f0000000040)={0x2, 0x4e21, 0x0, @dev}, 0x1c) 23:29:03 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:29:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f00000001c0)) [ 733.285548][T16950] loop4: detected capacity change from 1 to 0 23:29:03 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8937, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:29:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8904, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 23:29:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x8, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23:29:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0x20}, 0x0) 23:29:04 executing program 0: perf_event_open(&(0x7f0000001b80)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 733.916056][ T5] usb 4-1: new high-speed USB device number 24 using dummy_hcd 23:29:04 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, &(0x7f0000001000)=@hci, &(0x7f0000000040)=0x80) [ 734.165273][ T5] usb 4-1: Using ep0 maxpacket: 16 23:29:04 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) [ 734.283962][ T5] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 734.293013][ T5] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 734.303524][ T5] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 23:29:04 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x4b47, 0x0) 23:29:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x4b47, 0x0) 23:29:05 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}]}}) [ 734.575566][ T5] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 734.584991][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.593369][ T5] usb 4-1: Product: syz [ 734.597734][ T5] usb 4-1: Manufacturer: syz [ 734.602605][ T5] usb 4-1: SerialNumber: syz [ 735.073841][ T5] usb 4-1: 0:2 : does not exist [ 735.166696][ T5] usb 4-1: USB disconnect, device number 24 [ 735.773264][ T5] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 736.012730][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 736.133218][ T5] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 736.142410][ T5] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 736.152958][ T5] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 736.323382][ T5] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 736.332858][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.341072][ T5] usb 4-1: Product: syz [ 736.346050][ T5] usb 4-1: Manufacturer: syz [ 736.350833][ T5] usb 4-1: SerialNumber: syz 23:29:07 executing program 3: syz_emit_ethernet(0x32, &(0x7f0000000040)={@dev, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "8656ed", 0x0, "11ddfe"}}}}}}, 0x0) 23:29:07 executing program 1: syz_emit_ethernet(0x13c, &(0x7f0000000dc0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "c9512a", 0x106, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[@srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0xfffc, [@private1, @private1]}, @fragment, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@dev]}, @hopopts], {0x0, 0x0, 0xb6, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "69520b302292664c8c1619b08301bf664ac78f3a9c2903dfcf29b20eaf24962dee5a372e132dd66a6a3e2a41eb8fd750ecc11ba225806f3c0a9fbd54ae51c0dbf6843449f82fab42478e9ebb61472f4259b0748057b5b962d5b87d9aeb29fdbd048c455b861925d18a8972fb7df24f8cd82a0fdd7b02c3a807fe8e8e1407f929e0e3716841ece3c786b17f094fe12857c4e0be89e111e0f0c187917a41c4c72d68c1ec401d659565dacb"}}}}}}}, 0x0) 23:29:07 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[]) 23:29:07 executing program 2: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',blksize=0x0000000000000c00,dont_measure,obj_user=$\\\',mask=^MAY_EXEC,context=st\"ff_u,smackfsfl']) 23:29:07 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8903, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:29:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'team_slave_1\x00', &(0x7f0000000200)=ANY=[@ANYRES64=r0]}) [ 736.662636][ T5] usb 4-1: 0:2 : does not exist [ 736.741364][ T5] usb 4-1: USB disconnect, device number 25 [ 736.804161][T17038] overlayfs: missing 'lowerdir' [ 736.888203][T17037] overlayfs: missing 'lowerdir' [ 736.897355][T17041] fuse: blksize only supported for fuseblk [ 736.961137][T17041] fuse: blksize only supported for fuseblk 23:29:07 executing program 4: timer_create(0x8acbb5c5224c28dd, &(0x7f00000001c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 23:29:07 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x41007701, 0x0) 23:29:07 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:29:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x8000000, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23:29:07 executing program 2: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xb0000000}) 23:29:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 23:29:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_mreq(r0, 0x29, 0x1a, &(0x7f0000000000)={@mcast1}, 0x14) 23:29:08 executing program 5: write$tun(0xffffffffffffffff, 0x0, 0x9f) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x201) write$tun(r0, &(0x7f0000000040)={@void, @void, @arp=@generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @broadcast}}, 0x8800000) socketpair(0x2c, 0x0, 0xff, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x80001) fork() waitid(0x1, 0x0, 0x0, 0x4, 0x0) getresgid(&(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)) getresgid(&(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0)) syz_open_dev$vcsu(0x0, 0x82edcca36, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x658, 0xf0, 0x230, 0x358, 0x358, 0xf0, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, &(0x7f0000000240), {[{{@ipv6={@rand_addr=' \x01\x00', @dev, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffff00, 0xffffff00], 'wg2\x00', 'tunl0\x00', {0xff}, {}, 0x2f, 0xff, 0x1, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4=@multicast1, 0xb, 0x2c, 0xfff}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@ipv6={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, [], 0x1}, [0x0, 0x0, 0xff], [], 'veth1_to_bond\x00', 'dummy0\x00', {}, {}, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x7, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x24}, @loopback, @local, @remote, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, @ipv4={[], [], @dev}, @loopback, @private0, @empty, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @local]}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x7f}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) 23:29:08 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 23:29:08 executing program 1: io_setup(0x7c62, &(0x7f0000002340)) io_setup(0x1, &(0x7f00000001c0)) io_setup(0x3, &(0x7f0000000200)) 23:29:08 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x2}, 0x10) 23:29:08 executing program 3: r0 = socket$inet6(0x2, 0x3, 0xff) recvfrom$inet6(r0, 0x0, 0x0, 0x7ffff000, 0x0, 0x0) 23:29:08 executing program 4: socket(0x0, 0x790026a054e5975b, 0x0) 23:29:09 executing program 2: r0 = epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) [ 738.582372][ T5] usb 1-1: new high-speed USB device number 15 using dummy_hcd 23:29:09 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast1={0xff, 0xf}}, 0x14) 23:29:09 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1031, 0xffffffffffffffff, 0x8000000) 23:29:09 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000a80)={'veth0_virt_wifi\x00', @ifru_data=0x0}) 23:29:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000680)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 738.988660][ T5] usb 1-1: unable to get BOS descriptor or descriptor too short [ 739.093392][ T5] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 23:29:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1e, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) [ 739.263335][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 739.272907][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.281113][ T5] usb 1-1: Product: syz [ 739.285678][ T5] usb 1-1: Manufacturer: syz [ 739.290557][ T5] usb 1-1: SerialNumber: syz 23:29:09 executing program 1: syz_emit_ethernet(0x132, &(0x7f0000000200)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x30, 0x4, 0x0, 0x0, 0x124, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @remote, {[@rr={0x7, 0x7, 0x0, [@broadcast]}, @lsrr={0x83, 0x7, 0x0, [@remote]}, @cipso={0x86, 0x6c, 0x0, [{0x0, 0x5, "24a86d"}, {0x0, 0x12, "010000001000"/16}, {0x0, 0xb, "35d1ea5ccdbceeb8cf"}, {0x0, 0xa, "c2ed1d407708a7c6"}, {0x0, 0x12, "f444798c1dbc9f2eb99e042c745c70ed"}, {0x0, 0x6, "6b050d17"}, {0x0, 0x9, "04761ddc80797a"}, {0x0, 0x8, "84d0f5c3ffdb"}, {0x0, 0x11, "53495d92999aeea1167e143032e7fd"}]}, @rr={0x7, 0xb, 0x0, [@remote, @loopback]}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@remote}, {@private}, {@multicast1}, {@loopback}]}]}}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0851c912936f08f5d33cc516572dcf4585b4285afce85ff4d4b86c4897044570", "31f462f6dc52808dff98c9fb806dfe7c", {"a9d9cf24c2a1a52c3f5afbd06e6dcc89", "ad8f43b6cd9a54a76b3722d2be2404d9"}}}}}}}, 0x0) [ 739.738472][ T8434] usb 1-1: USB disconnect, device number 15 [ 740.533222][ T5] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 740.943679][ T5] usb 1-1: unable to get BOS descriptor or descriptor too short [ 741.033255][ T5] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 23:29:11 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000003, 0x11, r0, 0x8000000) 23:29:11 executing program 3: pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0xffffffffffffffff) 23:29:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 23:29:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000200)) 23:29:11 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, 0x0) 23:29:11 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) [ 741.462547][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 741.471951][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.480546][ T5] usb 1-1: Product: syz [ 741.485181][ T5] usb 1-1: Manufacturer: syz [ 741.789497][ T5] usb 1-1: can't set config #1, error -71 [ 741.912994][ T5] usb 1-1: USB disconnect, device number 16 23:29:12 executing program 1: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="191107803cf0", @val={@void}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @remote, @local, @dev, @private2}}}}, 0x0) 23:29:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x37, 0x0, 0x0) 23:29:12 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10}, {0x10, 0x1, 0x2}], 0x20}, 0x0) 23:29:12 executing program 2: perf_event_open(&(0x7f0000001b80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 23:29:12 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={0x0}}, 0x0) 23:29:13 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000020c0)='9p\x00', 0x0, 0x0) 23:29:13 executing program 5: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x0) 23:29:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x8000000) 23:29:13 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/crypto\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000100)='fuse\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@dont_hash='dont_hash'}]}}) 23:29:13 executing program 1: syz_open_dev$loop(&(0x7f0000000700)='/dev/loop#\x00', 0x0, 0x80200) 23:29:13 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 23:29:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 743.812523][T17173] fuse: Bad value for 'user_id' 23:29:14 executing program 5: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/117, 0x75}, {&(0x7f0000000080)=""/84, 0x54}], 0x2, &(0x7f0000001700)=[{&(0x7f00000004c0)=""/143, 0x8f}, {0x0}], 0x2, 0x0) 23:29:14 executing program 4: syz_emit_ethernet(0xec, &(0x7f0000000dc0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "c9512a", 0xb6, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[], {0x0, 0x4e23, 0xb6, 0x0, @gue={{0x1, 0x0, 0x0, 0x1, 0x0, @void}, "69520b302292664c8c1619b08301bf664ac78f3a9c2903dfcf29b20eaf24962dee5a372e132dd66a6a3e2a41eb8fd750ecc11ba225806f3c0a9fbd54ae51c0dbf6843449f82fab42478e9ebb61472f4259b0748057b5b962d5b87d9aeb29fdbd048c455b861925d18a8972fb7df24f8cd82a0fdd7b02c3a807fe8e8e1407f929e0e3716841ece3c786b17f094fe12857c4e0be89e111e0f0c187917a41c4c72d68c1ec401d659565dacb"}}}}}}}, 0x0) 23:29:14 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000500)={[{@mode={'mode'}}], [{@appraise_type='appraise_type=imasig'}, {@dont_appraise='dont_appraise'}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002f40)) 23:29:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0xc0045878, 0x0) 23:29:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@raw=[@ldst, @initr0], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 23:29:14 executing program 0: r0 = perf_event_open(&(0x7f0000001b80)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 23:29:15 executing program 4: perf_event_open(&(0x7f0000001b80)={0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:29:15 executing program 5: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/117, 0x75}, {&(0x7f0000000080)=""/84, 0x54}, {&(0x7f0000000100)=""/113, 0x71}], 0x3, &(0x7f0000001700)=[{&(0x7f00000004c0)=""/143, 0x8f}, {&(0x7f0000000580)=""/1, 0x1}, {0x0}, {0x0}], 0x4, 0x0) 23:29:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x41, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23:29:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000030c0)=ANY=[], 0x10f8}}, 0x0) 23:29:15 executing program 0: mount$9p_fd(0xc0ed0000, 0x0, &(0x7f00000020c0)='9p\x00', 0x0, 0x0) 23:29:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8983, 0x0) 23:29:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80) 23:29:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:29:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x800}}], 0x18}, 0x0) 23:29:16 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x1000, 0x0) 23:29:16 executing program 0: socket(0xa, 0x0, 0x101) 23:29:16 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000020c0)='9p\x00', 0x0, &(0x7f0000002480)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@fscache='fscache'}], [{@audit='audit'}]}}) 23:29:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000000250001"], 0x64}}, 0x0) 23:29:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:29:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8981, 0x0) 23:29:17 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0) [ 746.760734][T17225] 9pnet: Insufficient options for proto=fd [ 746.884390][T17230] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 747.001332][T17187] ===================================================== [ 747.008307][T17187] BUG: KMSAN: uninit-value in bpf_iter_prog_supported+0x3dd/0x6a0 [ 747.016199][T17187] CPU: 1 PID: 17187 Comm: bpf_preload Not tainted 5.11.0-rc7-syzkaller #0 [ 747.024712][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 747.034854][T17187] Call Trace: [ 747.038128][T17187] dump_stack+0x21c/0x280 [ 747.042517][T17187] kmsan_report+0xfb/0x1e0 [ 747.047005][T17187] __msan_warning+0x5f/0xa0 [ 747.051526][T17187] bpf_iter_prog_supported+0x3dd/0x6a0 [ 747.056992][T17187] bpf_check+0x11650/0x1c220 [ 747.061591][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.066794][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 747.072603][T17187] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 747.078691][T17187] ? ktime_get_with_offset+0x419/0x520 [ 747.084213][T17187] ? kmsan_internal_set_origin+0x85/0xc0 [ 747.089850][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.095049][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 747.100860][T17187] __do_sys_bpf+0x16fc9/0x1a840 [ 747.105713][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.110912][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 747.116719][T17187] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 747.122798][T17187] ? rcu_all_qs+0x23/0x240 [ 747.127262][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.132462][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.137669][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 747.143479][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.148694][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 747.154502][T17187] __se_sys_bpf+0x8e/0xa0 [ 747.158846][T17187] __x64_sys_bpf+0x4a/0x70 [ 747.163258][T17187] do_syscall_64+0x9f/0x140 [ 747.167824][T17187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 747.173748][T17187] RIP: 0033:0x7ff06de8b469 [ 747.178153][T17187] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 747.197757][T17187] RSP: 002b:00007ffd2f63de48 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 747.206165][T17187] RAX: ffffffffffffffda RBX: 0000000000551130 RCX: 00007ff06de8b469 [ 747.214133][T17187] RDX: 0000000000000078 RSI: 00007ffd2f63df00 RDI: 0000000000000005 [ 747.222098][T17187] RBP: 00007ffd2f63dfc0 R08: 0000000000000000 R09: 0000000000551130 [ 747.230069][T17187] R10: 00007ffd2f63e10c R11: 0000000000000246 R12: 0000000000000000 [ 747.238035][T17187] R13: 0000000000ffffff R14: 00007ffd2f63df30 R15: 00007ffd2f63df00 [ 747.246005][T17187] [ 747.248322][T17187] Uninit was created at: [ 747.252556][T17187] kmsan_internal_poison_shadow+0x5c/0xf0 [ 747.258295][T17187] kmsan_slab_alloc+0x8d/0xe0 [ 747.262983][T17187] kmem_cache_alloc_trace+0x8ca/0x1020 [ 747.268450][T17187] bpf_iter_reg_target+0x81/0x3f0 [ 747.273478][T17187] bpf_sk_storage_map_iter_init+0x6a/0x85 [ 747.279198][T17187] do_one_initcall+0x362/0x8d0 [ 747.283962][T17187] do_initcall_level+0x1e7/0x35a [ 747.288904][T17187] do_initcalls+0x127/0x1cb [ 747.293399][T17187] do_basic_setup+0x33/0x36 [ 747.297898][T17187] kernel_init_freeable+0x23d/0x390 [ 747.303089][T17187] kernel_init+0x1f/0x840 [ 747.307504][T17187] ret_from_fork+0x1f/0x30 [ 747.311915][T17187] ===================================================== [ 747.318831][T17187] Disabling lock debugging due to kernel taint [ 747.329560][T17187] ===================================================== [ 747.336506][T17187] BUG: KMSAN: uninit-value in bpf_iter_prog_supported+0x3dd/0x6a0 [ 747.344337][T17187] CPU: 1 PID: 17187 Comm: bpf_preload Tainted: G B 5.11.0-rc7-syzkaller #0 [ 747.354236][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 747.364296][T17187] Call Trace: [ 747.367576][T17187] dump_stack+0x21c/0x280 [ 747.371927][T17187] kmsan_report+0xfb/0x1e0 [ 747.376355][T17187] __msan_warning+0x5f/0xa0 [ 747.380859][T17187] bpf_iter_prog_supported+0x3dd/0x6a0 [ 747.386323][T17187] bpf_check+0x11650/0x1c220 [ 747.390918][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.396246][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 747.402055][T17187] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 747.408130][T17187] ? ktime_get_with_offset+0x419/0x520 [ 747.413606][T17187] ? kmsan_internal_set_origin+0x85/0xc0 [ 747.419243][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.424446][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 747.430256][T17187] __do_sys_bpf+0x16fc9/0x1a840 [ 747.435135][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.440332][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 747.446143][T17187] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 747.452216][T17187] ? rcu_all_qs+0x23/0x240 [ 747.456632][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.461826][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.467027][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 747.472849][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.478060][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 747.483872][T17187] __se_sys_bpf+0x8e/0xa0 [ 747.488205][T17187] __x64_sys_bpf+0x4a/0x70 [ 747.492621][T17187] do_syscall_64+0x9f/0x140 [ 747.497129][T17187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 747.503036][T17187] RIP: 0033:0x7ff06de8b469 [ 747.507451][T17187] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 747.527065][T17187] RSP: 002b:00007ffd2f63de48 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 747.535478][T17187] RAX: ffffffffffffffda RBX: 0000000000551130 RCX: 00007ff06de8b469 [ 747.543449][T17187] RDX: 0000000000000078 RSI: 00007ffd2f63df00 RDI: 0000000000000005 [ 747.551416][T17187] RBP: 00007ffd2f63dfc0 R08: 0000000000000000 R09: 0000000000551130 [ 747.559410][T17187] R10: 00007ffd2f63e10c R11: 0000000000000246 R12: 0000000000000000 [ 747.567377][T17187] R13: 0000000000ffffff R14: 00007ffd2f63df30 R15: 00007ffd2f63df00 [ 747.575487][T17187] [ 747.577804][T17187] Uninit was created at: [ 747.582024][T17187] kmsan_internal_poison_shadow+0x5c/0xf0 [ 747.587766][T17187] kmsan_slab_alloc+0x8d/0xe0 [ 747.592442][T17187] kmem_cache_alloc_trace+0x8ca/0x1020 [ 747.597896][T17187] bpf_iter_reg_target+0x81/0x3f0 [ 747.602919][T17187] bpf_sockmap_iter_init+0x6a/0x85 [ 747.608028][T17187] do_one_initcall+0x362/0x8d0 [ 747.612787][T17187] do_initcall_level+0x1e7/0x35a [ 747.617723][T17187] do_initcalls+0x127/0x1cb [ 747.622219][T17187] do_basic_setup+0x33/0x36 [ 747.626715][T17187] kernel_init_freeable+0x23d/0x390 [ 747.631904][T17187] kernel_init+0x1f/0x840 [ 747.636229][T17187] ret_from_fork+0x1f/0x30 [ 747.640729][T17187] ===================================================== [ 747.652925][T17187] ===================================================== [ 747.659876][T17187] BUG: KMSAN: uninit-value in bpf_iter_prog_supported+0x3dd/0x6a0 [ 747.667708][T17187] CPU: 1 PID: 17187 Comm: bpf_preload Tainted: G B 5.11.0-rc7-syzkaller #0 [ 747.677623][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 747.687689][T17187] Call Trace: [ 747.690987][T17187] dump_stack+0x21c/0x280 [ 747.695490][T17187] kmsan_report+0xfb/0x1e0 [ 747.699928][T17187] __msan_warning+0x5f/0xa0 [ 747.704450][T17187] bpf_iter_prog_supported+0x3dd/0x6a0 [ 747.709934][T17187] bpf_check+0x11650/0x1c220 [ 747.714554][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.719778][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 747.725609][T17187] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 747.731700][T17187] ? ktime_get_with_offset+0x419/0x520 [ 747.737186][T17187] ? kmsan_internal_set_origin+0x85/0xc0 [ 747.742935][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.748168][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 747.753998][T17187] __do_sys_bpf+0x16fc9/0x1a840 [ 747.758877][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.764100][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 747.769933][T17187] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 747.776025][T17187] ? rcu_all_qs+0x23/0x240 [ 747.780457][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.785678][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.790907][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 747.796740][T17187] ? kmsan_get_metadata+0x116/0x180 [ 747.801957][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 747.807769][T17187] __se_sys_bpf+0x8e/0xa0 [ 747.812095][T17187] __x64_sys_bpf+0x4a/0x70 [ 747.816515][T17187] do_syscall_64+0x9f/0x140 [ 747.821023][T17187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 747.826917][T17187] RIP: 0033:0x7ff06de8b469 [ 747.831321][T17187] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 747.851117][T17187] RSP: 002b:00007ffd2f63de48 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 747.859555][T17187] RAX: ffffffffffffffda RBX: 0000000000551130 RCX: 00007ff06de8b469 [ 747.867524][T17187] RDX: 0000000000000078 RSI: 00007ffd2f63df00 RDI: 0000000000000005 [ 747.875490][T17187] RBP: 00007ffd2f63dfc0 R08: 0000000000000000 R09: 0000000000551130 [ 747.883454][T17187] R10: 00007ffd2f63e10c R11: 0000000000000246 R12: 0000000000000000 [ 747.891417][T17187] R13: 0000000000ffffff R14: 00007ffd2f63df30 R15: 00007ffd2f63df00 [ 747.899405][T17187] [ 747.901719][T17187] Uninit was created at: [ 747.905942][T17187] kmsan_internal_poison_shadow+0x5c/0xf0 [ 747.911671][T17187] kmsan_slab_alloc+0x8d/0xe0 [ 747.916351][T17187] kmem_cache_alloc_trace+0x8ca/0x1020 [ 747.921806][T17187] bpf_iter_reg_target+0x81/0x3f0 [ 747.926832][T17187] bpf_prog_iter_init+0x6a/0x85 [ 747.931677][T17187] do_one_initcall+0x362/0x8d0 [ 747.936441][T17187] do_initcall_level+0x1e7/0x35a [ 747.941371][T17187] do_initcalls+0x127/0x1cb [ 747.945882][T17187] do_basic_setup+0x33/0x36 [ 747.950381][T17187] kernel_init_freeable+0x23d/0x390 23:29:18 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1b, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23:29:18 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087708, 0x0) [ 747.955572][T17187] kernel_init+0x1f/0x840 [ 747.959899][T17187] ret_from_fork+0x1f/0x30 [ 747.964311][T17187] ===================================================== [ 747.973730][T17187] ===================================================== [ 747.980679][T17187] BUG: KMSAN: uninit-value in bpf_iter_prog_supported+0x3dd/0x6a0 [ 747.988514][T17187] CPU: 1 PID: 17187 Comm: bpf_preload Tainted: G B 5.11.0-rc7-syzkaller #0 [ 747.998437][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.008500][T17187] Call Trace: [ 748.011787][T17187] dump_stack+0x21c/0x280 [ 748.016142][T17187] kmsan_report+0xfb/0x1e0 [ 748.020588][T17187] __msan_warning+0x5f/0xa0 [ 748.025113][T17187] bpf_iter_prog_supported+0x3dd/0x6a0 [ 748.030597][T17187] bpf_check+0x11650/0x1c220 [ 748.035216][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.040438][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 748.046268][T17187] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 748.052357][T17187] ? ktime_get_with_offset+0x419/0x520 [ 748.057910][T17187] ? kmsan_internal_set_origin+0x85/0xc0 [ 748.063551][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.068755][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 748.074574][T17187] __do_sys_bpf+0x16fc9/0x1a840 [ 748.079431][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.084635][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 748.090447][T17187] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 748.096523][T17187] ? rcu_all_qs+0x23/0x240 [ 748.100942][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.106246][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.111445][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 748.117253][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.122455][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 748.128287][T17187] __se_sys_bpf+0x8e/0xa0 [ 748.132614][T17187] __x64_sys_bpf+0x4a/0x70 [ 748.137027][T17187] do_syscall_64+0x9f/0x140 [ 748.141529][T17187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 748.147432][T17187] RIP: 0033:0x7ff06de8b469 [ 748.151849][T17187] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 748.171452][T17187] RSP: 002b:00007ffd2f63de48 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 748.179866][T17187] RAX: ffffffffffffffda RBX: 0000000000551130 RCX: 00007ff06de8b469 [ 748.187835][T17187] RDX: 0000000000000078 RSI: 00007ffd2f63df00 RDI: 0000000000000005 [ 748.195798][T17187] RBP: 00007ffd2f63dfc0 R08: 0000000000000000 R09: 0000000000551130 [ 748.203787][T17187] R10: 00007ffd2f63e10c R11: 0000000000000246 R12: 0000000000000000 [ 748.211756][T17187] R13: 0000000000ffffff R14: 00007ffd2f63df30 R15: 00007ffd2f63df00 [ 748.219724][T17187] [ 748.222035][T17187] Uninit was created at: [ 748.226275][T17187] kmsan_internal_poison_shadow+0x5c/0xf0 [ 748.231998][T17187] kmsan_slab_alloc+0x8d/0xe0 [ 748.236674][T17187] kmem_cache_alloc_trace+0x8ca/0x1020 [ 748.242131][T17187] bpf_iter_reg_target+0x81/0x3f0 [ 748.247160][T17187] task_iter_init+0x141/0x1b7 [ 748.251834][T17187] do_one_initcall+0x362/0x8d0 23:29:18 executing program 0: syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}, {@default_permissions='default_permissions'}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@fsname={'fsname', 0x3d, 'wfdno'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) [ 748.256607][T17187] do_initcall_level+0x1e7/0x35a [ 748.261543][T17187] do_initcalls+0x127/0x1cb [ 748.266052][T17187] do_basic_setup+0x33/0x36 [ 748.270552][T17187] kernel_init_freeable+0x23d/0x390 [ 748.275742][T17187] kernel_init+0x1f/0x840 [ 748.280068][T17187] ret_from_fork+0x1f/0x30 [ 748.284479][T17187] ===================================================== [ 748.291556][T17187] ===================================================== [ 748.298487][T17187] BUG: KMSAN: uninit-value in bpf_iter_prog_supported+0x3dd/0x6a0 [ 748.306328][T17187] CPU: 1 PID: 17187 Comm: bpf_preload Tainted: G B 5.11.0-rc7-syzkaller #0 [ 748.316296][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.326379][T17187] Call Trace: [ 748.329664][T17187] dump_stack+0x21c/0x280 [ 748.334016][T17187] kmsan_report+0xfb/0x1e0 [ 748.338457][T17187] __msan_warning+0x5f/0xa0 [ 748.342973][T17187] bpf_iter_prog_supported+0x3dd/0x6a0 [ 748.348437][T17187] bpf_check+0x11650/0x1c220 [ 748.353036][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.358250][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 748.364062][T17187] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 748.370133][T17187] ? ktime_get_with_offset+0x419/0x520 [ 748.375597][T17187] ? kmsan_internal_set_origin+0x85/0xc0 [ 748.381233][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.386433][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 748.392259][T17187] __do_sys_bpf+0x16fc9/0x1a840 [ 748.397116][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.402314][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 748.408121][T17187] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 748.414192][T17187] ? rcu_all_qs+0x23/0x240 [ 748.418602][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.423813][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.429008][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 748.434813][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.440011][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 748.445822][T17187] __se_sys_bpf+0x8e/0xa0 [ 748.450152][T17187] __x64_sys_bpf+0x4a/0x70 [ 748.454561][T17187] do_syscall_64+0x9f/0x140 [ 748.459060][T17187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 748.464957][T17187] RIP: 0033:0x7ff06de8b469 [ 748.469381][T17187] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 748.489001][T17187] RSP: 002b:00007ffd2f63de48 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 748.497411][T17187] RAX: ffffffffffffffda RBX: 0000000000551130 RCX: 00007ff06de8b469 [ 748.505376][T17187] RDX: 0000000000000078 RSI: 00007ffd2f63df00 RDI: 0000000000000005 [ 748.513340][T17187] RBP: 00007ffd2f63dfc0 R08: 0000000000000000 R09: 0000000000551130 [ 748.521304][T17187] R10: 00007ffd2f63e10c R11: 0000000000000246 R12: 0000000000000000 [ 748.529269][T17187] R13: 0000000000ffffff R14: 00007ffd2f63df30 R15: 00007ffd2f63df00 [ 748.537237][T17187] [ 748.539558][T17187] Uninit was created at: [ 748.543777][T17187] kmsan_internal_poison_shadow+0x5c/0xf0 [ 748.549499][T17187] kmsan_slab_alloc+0x8d/0xe0 [ 748.554178][T17187] kmem_cache_alloc_trace+0x8ca/0x1020 [ 748.559634][T17187] bpf_iter_reg_target+0x81/0x3f0 [ 748.564659][T17187] task_iter_init+0x6c/0x1b7 [ 748.569245][T17187] do_one_initcall+0x362/0x8d0 [ 748.574003][T17187] do_initcall_level+0x1e7/0x35a [ 748.578939][T17187] do_initcalls+0x127/0x1cb [ 748.583430][T17187] do_basic_setup+0x33/0x36 [ 748.587924][T17187] kernel_init_freeable+0x23d/0x390 [ 748.593128][T17187] kernel_init+0x1f/0x840 [ 748.597465][T17187] ret_from_fork+0x1f/0x30 [ 748.601873][T17187] ===================================================== [ 748.608966][T17187] ===================================================== [ 748.615894][T17187] BUG: KMSAN: uninit-value in bpf_iter_prog_supported+0x3dd/0x6a0 [ 748.623725][T17187] CPU: 1 PID: 17187 Comm: bpf_preload Tainted: G B 5.11.0-rc7-syzkaller #0 [ 748.633628][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.643694][T17187] Call Trace: [ 748.646976][T17187] dump_stack+0x21c/0x280 [ 748.651331][T17187] kmsan_report+0xfb/0x1e0 [ 748.655767][T17187] __msan_warning+0x5f/0xa0 [ 748.660291][T17187] bpf_iter_prog_supported+0x3dd/0x6a0 [ 748.665780][T17187] bpf_check+0x11650/0x1c220 [ 748.670396][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.675616][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 748.681453][T17187] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 748.687550][T17187] ? ktime_get_with_offset+0x419/0x520 [ 748.693053][T17187] ? kmsan_internal_set_origin+0x85/0xc0 [ 748.698706][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.703924][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 748.709755][T17187] __do_sys_bpf+0x16fc9/0x1a840 [ 748.714626][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.719847][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 748.725679][T17187] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 748.731771][T17187] ? rcu_all_qs+0x23/0x240 [ 748.736203][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.741424][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.746664][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 748.752491][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.757713][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 748.763538][T17187] __se_sys_bpf+0x8e/0xa0 [ 748.767884][T17187] __x64_sys_bpf+0x4a/0x70 [ 748.772313][T17187] do_syscall_64+0x9f/0x140 [ 748.776833][T17187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 748.782743][T17187] RIP: 0033:0x7ff06de8b469 [ 748.787171][T17187] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 748.806786][T17187] RSP: 002b:00007ffd2f63de48 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 748.815213][T17187] RAX: ffffffffffffffda RBX: 0000000000551130 RCX: 00007ff06de8b469 [ 748.823196][T17187] RDX: 0000000000000078 RSI: 00007ffd2f63df00 RDI: 0000000000000005 [ 748.831176][T17187] RBP: 00007ffd2f63dfc0 R08: 0000000000000000 R09: 0000000000551130 [ 748.839254][T17187] R10: 00007ffd2f63e10c R11: 0000000000000246 R12: 0000000000000000 [ 748.847234][T17187] R13: 0000000000ffffff R14: 00007ffd2f63df30 R15: 00007ffd2f63df00 [ 748.855231][T17187] [ 748.857549][T17187] Uninit was created at: [ 748.861783][T17187] kmsan_internal_poison_shadow+0x5c/0xf0 [ 748.867529][T17187] kmsan_slab_alloc+0x8d/0xe0 [ 748.872227][T17187] kmem_cache_alloc_trace+0x8ca/0x1020 [ 748.877698][T17187] bpf_iter_reg_target+0x81/0x3f0 [ 748.882735][T17187] bpf_map_iter_init+0xd4/0x11e [ 748.887599][T17187] do_one_initcall+0x362/0x8d0 [ 748.892377][T17187] do_initcall_level+0x1e7/0x35a [ 748.897329][T17187] do_initcalls+0x127/0x1cb [ 748.901878][T17187] do_basic_setup+0x33/0x36 [ 748.906392][T17187] kernel_init_freeable+0x23d/0x390 [ 748.911603][T17187] kernel_init+0x1f/0x840 [ 748.915950][T17187] ret_from_fork+0x1f/0x30 [ 748.920382][T17187] ===================================================== [ 748.927481][T17187] ===================================================== [ 748.934420][T17187] BUG: KMSAN: uninit-value in bpf_iter_prog_supported+0x3dd/0x6a0 [ 748.942250][T17187] CPU: 1 PID: 17187 Comm: bpf_preload Tainted: G B 5.11.0-rc7-syzkaller #0 [ 748.952148][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.962207][T17187] Call Trace: [ 748.965491][T17187] dump_stack+0x21c/0x280 [ 748.969846][T17187] kmsan_report+0xfb/0x1e0 [ 748.974284][T17187] __msan_warning+0x5f/0xa0 [ 748.978809][T17187] bpf_iter_prog_supported+0x3dd/0x6a0 [ 748.984294][T17187] bpf_check+0x11650/0x1c220 [ 748.988910][T17187] ? kmsan_get_metadata+0x116/0x180 [ 748.994134][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 748.999983][T17187] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 749.006072][T17187] ? ktime_get_with_offset+0x419/0x520 [ 749.011555][T17187] ? kmsan_internal_set_origin+0x85/0xc0 [ 749.017210][T17187] ? kmsan_get_metadata+0x116/0x180 [ 749.022435][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 749.028262][T17187] __do_sys_bpf+0x16fc9/0x1a840 [ 749.033129][T17187] ? kmsan_get_metadata+0x116/0x180 [ 749.038346][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 749.044174][T17187] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 749.050265][T17187] ? rcu_all_qs+0x23/0x240 [ 749.054694][T17187] ? kmsan_get_metadata+0x116/0x180 [ 749.059912][T17187] ? kmsan_get_metadata+0x116/0x180 [ 749.065126][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 749.070955][T17187] ? kmsan_get_metadata+0x116/0x180 [ 749.076173][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 749.082001][T17187] __se_sys_bpf+0x8e/0xa0 [ 749.086349][T17187] __x64_sys_bpf+0x4a/0x70 [ 749.090783][T17187] do_syscall_64+0x9f/0x140 [ 749.095307][T17187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 749.101222][T17187] RIP: 0033:0x7ff06de8b469 [ 749.105643][T17187] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 749.125261][T17187] RSP: 002b:00007ffd2f63de48 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 749.133690][T17187] RAX: ffffffffffffffda RBX: 0000000000551130 RCX: 00007ff06de8b469 [ 749.141674][T17187] RDX: 0000000000000078 RSI: 00007ffd2f63df00 RDI: 0000000000000005 [ 749.149655][T17187] RBP: 00007ffd2f63dfc0 R08: 0000000000000000 R09: 0000000000551130 [ 749.157652][T17187] R10: 00007ffd2f63e10c R11: 0000000000000246 R12: 0000000000000000 [ 749.165647][T17187] R13: 0000000000ffffff R14: 00007ffd2f63df30 R15: 00007ffd2f63df00 [ 749.173637][T17187] [ 749.175952][T17187] Uninit was created at: [ 749.180170][T17187] kmsan_internal_poison_shadow+0x5c/0xf0 [ 749.185903][T17187] kmsan_slab_alloc+0x8d/0xe0 [ 749.190589][T17187] kmem_cache_alloc_trace+0x8ca/0x1020 [ 749.196046][T17187] bpf_iter_reg_target+0x81/0x3f0 [ 749.201072][T17187] bpf_map_iter_init+0x6f/0x11e [ 749.205918][T17187] do_one_initcall+0x362/0x8d0 23:29:19 executing program 5: r0 = getpid() prlimit64(r0, 0x0, &(0x7f0000000280), 0x0) [ 749.210679][T17187] do_initcall_level+0x1e7/0x35a [ 749.215613][T17187] do_initcalls+0x127/0x1cb [ 749.220111][T17187] do_basic_setup+0x33/0x36 [ 749.224610][T17187] kernel_init_freeable+0x23d/0x390 [ 749.229802][T17187] kernel_init+0x1f/0x840 [ 749.234132][T17187] ret_from_fork+0x1f/0x30 [ 749.238545][T17187] ===================================================== 23:29:19 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/170, 0xaa}, {0x0}], 0x2) [ 749.839365][T17243] fuse: Bad value for 'fd' [ 749.880340][T17243] fuse: Bad value for 'fd' 23:29:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000000280001"], 0x64}}, 0x0) 23:29:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0xee}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 23:29:20 executing program 3: syz_emit_ethernet(0x12, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@generic={0x8035}}}, 0x0) 23:29:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 23:29:20 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@raw=[@ldst, @initr0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 750.331958][T17250] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 23:29:20 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 23:29:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 23:29:21 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='up']) 23:29:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:29:21 executing program 0: perf_event_open(&(0x7f0000001b80)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:29:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x46, 0x0, 0x0) 23:29:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x5452, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 23:29:21 executing program 2: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/117, 0x75}, {&(0x7f0000000080)=""/84, 0x54}, {&(0x7f0000000100)=""/113, 0x71}, {0x0}, {&(0x7f0000000280)=""/213, 0xd5}], 0x5, &(0x7f0000001700)=[{&(0x7f00000004c0)=""/143, 0x8f}, {&(0x7f0000000680)=""/4096, 0x1000}, {0x0}], 0x3, 0x0) [ 751.312333][T17269] overlayfs: unrecognized mount option "up" or missing value 23:29:22 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xc0b) 23:29:22 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_u='version=9p2000.u'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@subj_user={'subj_user'}}, {@appraise='appraise'}]}}) 23:29:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 23:29:22 executing program 1: mount$fuse(0x1000000, 0x0, 0x0, 0x0, 0x0) 23:29:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x240, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}, {{@ipv6={@private0, @private1, [], [], 'ip6erspan0\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "a0c983be54c7df736bf600e3327b6b2ece726060c9f4818e48b147493043"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 23:29:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3a, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23:29:22 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000020c0)='9p\x00', 0x0, &(0x7f0000002480)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000', 0x22}], [{@audit='audit'}]}}) [ 752.113335][T17284] 9pnet: Insufficient options for proto=fd 23:29:22 executing program 0: setuid(0xee01) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x23, 0x0, 0x0) 23:29:22 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x10}]}}, &(0x7f0000000240)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 23:29:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040, 0x0) 23:29:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:29:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2, 0x0, 0x0) 23:29:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x6, 0x0, 0x0) [ 752.820868][T17187] ===================================================== [ 752.827831][T17187] BUG: KMSAN: uninit-value in bpf_iter_prog_supported+0x3dd/0x6a0 [ 752.835665][T17187] CPU: 0 PID: 17187 Comm: bpf_preload Tainted: G B 5.11.0-rc7-syzkaller #0 [ 752.845567][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.855632][T17187] Call Trace: [ 752.858914][T17187] dump_stack+0x21c/0x280 [ 752.863271][T17187] kmsan_report+0xfb/0x1e0 [ 752.867710][T17187] __msan_warning+0x5f/0xa0 [ 752.872231][T17187] bpf_iter_prog_supported+0x3dd/0x6a0 [ 752.877717][T17187] bpf_check+0x11650/0x1c220 [ 752.882335][T17187] ? kmsan_get_metadata+0x116/0x180 [ 752.887557][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 752.893378][T17187] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 752.899450][T17187] ? ktime_get_with_offset+0x419/0x520 [ 752.904910][T17187] ? kmsan_internal_set_origin+0x85/0xc0 [ 752.910550][T17187] ? kmsan_get_metadata+0x116/0x180 [ 752.915751][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 752.921563][T17187] __do_sys_bpf+0x16fc9/0x1a840 [ 752.926421][T17187] ? kmsan_get_metadata+0x116/0x180 [ 752.931623][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 752.937433][T17187] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 752.943520][T17187] ? rcu_all_qs+0x23/0x240 [ 752.947934][T17187] ? kmsan_get_metadata+0x116/0x180 [ 752.953144][T17187] ? kmsan_get_metadata+0x116/0x180 [ 752.958344][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 752.964152][T17187] ? kmsan_get_metadata+0x116/0x180 [ 752.969356][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 752.975167][T17187] __se_sys_bpf+0x8e/0xa0 [ 752.979495][T17187] __x64_sys_bpf+0x4a/0x70 [ 752.983904][T17187] do_syscall_64+0x9f/0x140 [ 752.988407][T17187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 752.994317][T17187] RIP: 0033:0x7ff06de8b469 [ 752.998724][T17187] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 753.018324][T17187] RSP: 002b:00007ffd2f63de48 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 753.026735][T17187] RAX: ffffffffffffffda RBX: 0000000000551050 RCX: 00007ff06de8b469 [ 753.034700][T17187] RDX: 0000000000000078 RSI: 00007ffd2f63df00 RDI: 0000000000000005 [ 753.042663][T17187] RBP: 00007ffd2f63dfc0 R08: 00007ffd2f63e10c R09: 0000000000551050 [ 753.050627][T17187] R10: 0000000000050b00 R11: 0000000000000246 R12: 0000000000000000 [ 753.058591][T17187] R13: 0000000000ffffff R14: 00007ffd2f63df30 R15: 00007ffd2f63df00 [ 753.066560][T17187] [ 753.068883][T17187] Uninit was created at: [ 753.073101][T17187] kmsan_internal_poison_shadow+0x5c/0xf0 [ 753.078846][T17187] kmsan_slab_alloc+0x8d/0xe0 [ 753.083517][T17187] kmem_cache_alloc_trace+0x8ca/0x1020 [ 753.088970][T17187] bpf_iter_reg_target+0x81/0x3f0 [ 753.094010][T17187] bpf_sk_storage_map_iter_init+0x6a/0x85 [ 753.099735][T17187] do_one_initcall+0x362/0x8d0 [ 753.104497][T17187] do_initcall_level+0x1e7/0x35a [ 753.109429][T17187] do_initcalls+0x127/0x1cb [ 753.113938][T17187] do_basic_setup+0x33/0x36 [ 753.118433][T17187] kernel_init_freeable+0x23d/0x390 [ 753.123627][T17187] kernel_init+0x1f/0x840 [ 753.127953][T17187] ret_from_fork+0x1f/0x30 [ 753.132366][T17187] ===================================================== [ 753.147102][T17187] ===================================================== [ 753.154133][T17187] BUG: KMSAN: uninit-value in bpf_iter_prog_supported+0x3dd/0x6a0 [ 753.161960][T17187] CPU: 0 PID: 17187 Comm: bpf_preload Tainted: G B 5.11.0-rc7-syzkaller #0 [ 753.171861][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.181949][T17187] Call Trace: [ 753.185235][T17187] dump_stack+0x21c/0x280 [ 753.189585][T17187] kmsan_report+0xfb/0x1e0 [ 753.194021][T17187] __msan_warning+0x5f/0xa0 [ 753.198553][T17187] bpf_iter_prog_supported+0x3dd/0x6a0 [ 753.204042][T17187] bpf_check+0x11650/0x1c220 [ 753.208663][T17187] ? kmsan_get_metadata+0x116/0x180 [ 753.213881][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 753.219714][T17187] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 753.225809][T17187] ? ktime_get_with_offset+0x419/0x520 [ 753.231294][T17187] ? kmsan_internal_set_origin+0x85/0xc0 [ 753.236954][T17187] ? kmsan_get_metadata+0x116/0x180 [ 753.242177][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 753.248008][T17187] __do_sys_bpf+0x16fc9/0x1a840 [ 753.252888][T17187] ? kmsan_get_metadata+0x116/0x180 [ 753.258108][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 753.263936][T17187] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 753.270032][T17187] ? rcu_all_qs+0x23/0x240 [ 753.274467][T17187] ? kmsan_get_metadata+0x116/0x180 [ 753.279690][T17187] ? kmsan_get_metadata+0x116/0x180 [ 753.284915][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 753.290747][T17187] ? kmsan_get_metadata+0x116/0x180 [ 753.295971][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 753.301808][T17187] __se_sys_bpf+0x8e/0xa0 [ 753.306159][T17187] __x64_sys_bpf+0x4a/0x70 [ 753.310595][T17187] do_syscall_64+0x9f/0x140 [ 753.315117][T17187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 753.321038][T17187] RIP: 0033:0x7ff06de8b469 [ 753.325461][T17187] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 753.345080][T17187] RSP: 002b:00007ffd2f63de48 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 753.353510][T17187] RAX: ffffffffffffffda RBX: 0000000000551050 RCX: 00007ff06de8b469 [ 753.361492][T17187] RDX: 0000000000000078 RSI: 00007ffd2f63df00 RDI: 0000000000000005 [ 753.369472][T17187] RBP: 00007ffd2f63dfc0 R08: 00007ffd2f63e10c R09: 0000000000551050 [ 753.377452][T17187] R10: 0000000000050b00 R11: 0000000000000246 R12: 0000000000000000 [ 753.385432][T17187] R13: 0000000000ffffff R14: 00007ffd2f63df30 R15: 00007ffd2f63df00 [ 753.393420][T17187] [ 753.395758][T17187] Uninit was created at: [ 753.399990][T17187] kmsan_internal_poison_shadow+0x5c/0xf0 [ 753.405735][T17187] kmsan_slab_alloc+0x8d/0xe0 [ 753.410431][T17187] kmem_cache_alloc_trace+0x8ca/0x1020 [ 753.415903][T17187] bpf_iter_reg_target+0x81/0x3f0 [ 753.420948][T17187] bpf_sockmap_iter_init+0x6a/0x85 [ 753.426075][T17187] do_one_initcall+0x362/0x8d0 [ 753.430850][T17187] do_initcall_level+0x1e7/0x35a [ 753.435802][T17187] do_initcalls+0x127/0x1cb [ 753.440317][T17187] do_basic_setup+0x33/0x36 [ 753.444832][T17187] kernel_init_freeable+0x23d/0x390 [ 753.450046][T17187] kernel_init+0x1f/0x840 [ 753.454394][T17187] ret_from_fork+0x1f/0x30 [ 753.458821][T17187] ===================================================== [ 753.474559][T17187] ===================================================== [ 753.481504][T17187] BUG: KMSAN: uninit-value in bpf_iter_prog_supported+0x3dd/0x6a0 [ 753.489337][T17187] CPU: 0 PID: 17187 Comm: bpf_preload Tainted: G B 5.11.0-rc7-syzkaller #0 [ 753.499454][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.509711][T17187] Call Trace: [ 753.512989][T17187] dump_stack+0x21c/0x280 [ 753.517329][T17187] kmsan_report+0xfb/0x1e0 [ 753.521752][T17187] __msan_warning+0x5f/0xa0 [ 753.526254][T17187] bpf_iter_prog_supported+0x3dd/0x6a0 [ 753.531713][T17187] bpf_check+0x11650/0x1c220 [ 753.536313][T17187] ? kmsan_get_metadata+0x116/0x180 [ 753.541515][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 753.547332][T17187] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 753.553402][T17187] ? ktime_get_with_offset+0x419/0x520 [ 753.558951][T17187] ? kmsan_internal_set_origin+0x85/0xc0 [ 753.564599][T17187] ? kmsan_get_metadata+0x116/0x180 [ 753.569803][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 753.575616][T17187] __do_sys_bpf+0x16fc9/0x1a840 [ 753.580470][T17187] ? kmsan_get_metadata+0x116/0x180 [ 753.585672][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 753.591501][T17187] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 753.597575][T17187] ? rcu_all_qs+0x23/0x240 [ 753.601988][T17187] ? kmsan_get_metadata+0x116/0x180 [ 753.607296][T17187] ? kmsan_get_metadata+0x116/0x180 [ 753.612495][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 753.618303][T17187] ? kmsan_get_metadata+0x116/0x180 [ 753.623500][T17187] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 753.629319][T17187] __se_sys_bpf+0x8e/0xa0 [ 753.633648][T17187] __x64_sys_bpf+0x4a/0x70 [ 753.638062][T17187] do_syscall_64+0x9f/0x140 [ 753.642571][T17187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 753.648466][T17187] RIP: 0033:0x7ff06de8b469 [ 753.652874][T17187] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ff 49 2b 00 f7 d8 64 89 01 48 [ 753.672483][T17187] RSP: 002b:00007ffd2f63de48 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 753.680907][T17187] RAX: ffffffffffffffda RBX: 0000000000551050 RCX: 00007ff06de8b469 [ 753.688886][T17187] RDX: 0000000000000078 RSI: 00007ffd2f63df00 RDI: 0000000000000005 [ 753.696855][T17187] RBP: 00007ffd2f63dfc0 R08: 00007ffd2f63e10c R09: 0000000000551050 [ 753.704827][T17187] R10: 0000000000050b00 R11: 0000000000000246 R12: 0000000000000000 [ 753.712802][T17187] R13: 0000000000ffffff R14: 00007ffd2f63df30 R15: 00007ffd2f63df00 [ 753.720781][T17187] [ 753.723095][T17187] Uninit was created at: [ 753.727405][T17187] kmsan_internal_poison_shadow+0x5c/0xf0 [ 753.733131][T17187] kmsan_slab_alloc+0x8d/0xe0 [ 753.737808][T17187] kmem_cache_alloc_trace+0x8ca/0x1020 [ 753.743263][T17187] bpf_iter_reg_target+0x81/0x3f0 [ 753.748297][T17187] bpf_prog_iter_init+0x6a/0x85 [ 753.753146][T17187] do_one_initcall+0x362/0x8d0 [ 753.757906][T17187] do_initcall_level+0x1e7/0x35a [ 753.762838][T17187] do_initcalls+0x127/0x1cb [ 753.767350][T17187] do_basic_setup+0x33/0x36 [ 753.771865][T17187] kernel_init_freeable+0x23d/0x390 [ 753.777056][T17187] kernel_init+0x1f/0x840 [ 753.781384][T17187] ret_from_fork+0x1f/0x30 [ 753.785795][T17187] ===================================================== 23:29:24 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891f, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:29:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x3e, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local}, 0x1c) 23:29:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x891f, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 23:29:25 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x1e302000, 0x0, 0x8031, 0xffffffffffffffff, 0x8000000) 23:29:25 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={0x0, 0x0, 0x18}, 0x10) 23:29:25 executing program 2: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x22b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}, [{{0x9, 0x5, 0x2, 0x3, 0x200}}]}}}]}}]}}, 0x0) 23:29:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) 23:29:25 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) 23:29:25 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002640), 0x8000, &(0x7f00000026c0)={[{@fat=@codepage={'codepage', 0x3d, '1250'}}, {@fat=@umask={'umask'}}], [{@appraise='appraise'}]}) 23:29:26 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xa6832, 0xffffffffffffffff, 0x8000000) [ 755.623972][ T3119] ieee802154 phy0 wpan0: encryption failed: -22 [ 755.630517][ T3119] ieee802154 phy1 wpan1: encryption failed: -22 23:29:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00', {}, {}, 0x0, 0x0, 0xc}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 23:29:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x5, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x290, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0xfffffffffffffffe, {[{{@ipv6={@loopback, @loopback, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'sit0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) [ 755.792809][ T59] usb 3-1: new high-speed USB device number 6 using dummy_hcd 23:29:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8914, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:29:26 executing program 0: syz_mount_image$fuse(&(0x7f0000002140)='fuse\x00', &(0x7f0000002180)='./file0\x00', 0x0, 0x0, 0x0, 0x800040, &(0x7f00000021c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@hash='hash'}]}}) [ 756.041742][ T59] usb 3-1: Using ep0 maxpacket: 8 23:29:26 executing program 1: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@dev, @broadcast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fd60a9", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}}, 0x0) [ 756.163252][ T59] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 756.354272][ T59] usb 3-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40 [ 756.363648][ T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.371779][ T59] usb 3-1: Product: syz [ 756.376238][ T59] usb 3-1: Manufacturer: syz [ 756.380950][ T59] usb 3-1: SerialNumber: syz 23:29:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8917, 0x0) [ 756.451528][T17344] fuse: Bad value for 'fd' [ 756.454845][T17346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 23:29:27 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="b5f632ac5a3340dec019c58d", 0x87ffffb, 0x5}, {0x0}], 0x8503, &(0x7f0000000240)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) [ 756.499779][T17344] fuse: Bad value for 'fd' [ 756.673662][ T59] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 756.871406][ T59] usb 3-1: USB disconnect, device number 6