0000040)='/dev/sequencer\x00', 0x1, 0x0) write$sequencer(r0, &(0x7f0000000000)=[@t={0x81, 0x2}], 0x8) 08:40:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x190}}, 0x0) 08:40:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000100)={0x1, @write_voice_setting={{0xc26, 0x2}}}, 0x6) 08:40:19 executing program 4: bpf$LINK_GET_NEXT_ID(0x3, 0x0, 0x0) 08:40:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[@ANYBLOB="24000000145437"], 0x24}}, 0x0) 08:40:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x6000000000000000) [ 912.203144][T17923] loop0: detected capacity change from 0 to 32752 08:40:19 executing program 3: pselect6(0x40, &(0x7f0000000040)={0x6}, &(0x7f0000000080)={0x7}, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x0) 08:40:19 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) io_setup(0x3f, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001200)=[&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x8000000000000000}]) 08:40:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0xa00) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 08:40:19 executing program 1: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 08:40:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x8000000000000000) 08:40:19 executing program 0: r0 = syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f0000000080)=ANY=[]) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000080)='freezer.state\x00', 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x5, 0x0, [], [{0x3f, 0x200, 0x100000000, 0x1f, 0x6, 0xffffffffffffffc0}, {0xffffffff, 0x5, 0x98f, 0x6, 0x100000000, 0xfffffffffffffff8}], [[], [], [], [], []]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x11a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)='./file0\x00') fremovexattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') openat(r2, &(0x7f0000000040)='./file0\x00', 0x4002, 0x8) [ 912.935893][T17973] loop0: detected capacity change from 0 to 8 08:40:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x861d000000000000) 08:40:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0xa00) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 08:40:20 executing program 1: renameat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c, 0x0) 08:40:20 executing program 0: r0 = syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f0000000080)=ANY=[]) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000080)='freezer.state\x00', 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x5, 0x0, [], [{0x3f, 0x200, 0x100000000, 0x1f, 0x6, 0xffffffffffffffc0}, {0xffffffff, 0x5, 0x98f, 0x6, 0x100000000, 0xfffffffffffffff8}], [[], [], [], [], []]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x11a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)='./file0\x00') fremovexattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') openat(r2, &(0x7f0000000040)='./file0\x00', 0x4002, 0x8) 08:40:20 executing program 4: r0 = syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f0000000080)=ANY=[]) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000080)='freezer.state\x00', 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x5, 0x0, [], [{0x3f, 0x200, 0x100000000, 0x1f, 0x6, 0xffffffffffffffc0}, {0xffffffff, 0x5, 0x98f, 0x6, 0x100000000, 0xfffffffffffffff8}], [[], [], [], [], []]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x11a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)='./file0\x00') fremovexattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') openat(r2, &(0x7f0000000040)='./file0\x00', 0x4002, 0x8) 08:40:20 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00', r0) 08:40:20 executing program 1: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)) 08:40:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0xa00) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 08:40:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x9effffff00000000) 08:40:20 executing program 4: r0 = syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000000000000001000c00d00002000400000026010000000000000602000000000000b501000000000000ee0100000000000099000000000000003e010000000000008501000000000000a30100000000000078da2baeacca4eccc9492d2aa61d030085492b1f78da2baeacca4eccc9492d2a1e658c324619a30c1803005565c4a273797a6b616c6c657273a30078da636278cbc8c0c0c83051363d1ec8604800e2ff4000a41852805804889990d43003f925486aa4581818a4813433c37fb81aa01003c82c3520d62fc92dd02faeacd2cdcc4d4c4f4d4fcd3331b434373733b634d24fcbcc493580908c48363031400088d604627620e644926705f2fba16ab81850012392cba0f28cc87ad9806233a1721acaa87a9990f4229b0131f700dc0c76a818282442807ee400d2008b6a3509450078da63648000662056016226061686b4cc9c54030f0646a0208463c80255c508a5991838c0127ac9f939296d40614698b6654006cc0cc3470cac708e1132c71800421f11fb1c0078da636080803628ad02a53da0f43228fd084aab3142680046df02a2850100000000000008805cf90100535f0100ab010000000000001d0078da63606063a8482c29293264636080b21860624656312300b5bc09ab108000000000000000000200000024000000bd010000000000000100000000000000dc01", 0x200}], 0x0, &(0x7f0000000080)=ANY=[]) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000080)='freezer.state\x00', 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x5, 0x0, [], [{0x3f, 0x200, 0x100000000, 0x1f, 0x6, 0xffffffffffffffc0}, {0xffffffff, 0x5, 0x98f, 0x6, 0x100000000, 0xfffffffffffffff8}], [[], [], [], [], []]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x11a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)='./file0\x00') fremovexattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') openat(r2, &(0x7f0000000040)='./file0\x00', 0x4002, 0x8) [ 913.145914][T17998] loop4: detected capacity change from 0 to 8 08:40:20 executing program 0: r0 = syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f0000000080)=ANY=[]) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000080)='freezer.state\x00', 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x5, 0x0, [], [{0x3f, 0x200, 0x100000000, 0x1f, 0x6, 0xffffffffffffffc0}, {0xffffffff, 0x5, 0x98f, 0x6, 0x100000000, 0xfffffffffffffff8}], [[], [], [], [], []]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x11a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)='./file0\x00') fremovexattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') openat(r2, &(0x7f0000000040)='./file0\x00', 0x4002, 0x8) 08:40:20 executing program 0: r0 = syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f0000000080)=ANY=[]) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000080)='freezer.state\x00', 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x5, 0x0, [], [{0x3f, 0x200, 0x100000000, 0x1f, 0x6, 0xffffffffffffffc0}, {0xffffffff, 0x5, 0x98f, 0x6, 0x100000000, 0xfffffffffffffff8}], [[], [], [], [], []]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x11a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)='./file0\x00') fremovexattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') openat(r2, &(0x7f0000000040)='./file0\x00', 0x4002, 0x8) 08:40:20 executing program 4: r0 = syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f0000000080)=ANY=[]) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000080)='freezer.state\x00', 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x5, 0x0, [], [{0x3f, 0x200, 0x100000000, 0x1f, 0x6, 0xffffffffffffffc0}, {0xffffffff, 0x5, 0x98f, 0x6, 0x100000000, 0xfffffffffffffff8}], [[], [], [], [], []]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x11a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)='./file0\x00') fremovexattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') openat(r2, &(0x7f0000000040)='./file0\x00', 0x4002, 0x8) 08:40:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}, 0x0) 08:40:20 executing program 0: socket(0x2, 0x3, 0x5) 08:40:20 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self\x00', 0x115c00, 0x0) 08:40:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0xa00) ioctl$LOOP_SET_FD(r0, 0x1261, 0xffffffffffffffff) 08:40:20 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004440)='ns/pid\x00') 08:40:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0xefffffff00000000) 08:40:20 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6049}]}) 08:40:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 08:40:20 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700)='/dev/rfkill\x00', 0x149b40, 0x0) 08:40:20 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/237) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="80", 0x1}], 0x1, 0x0, 0x0) 08:40:20 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x0, 0x0) 08:40:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0xf0ffffff00000000) 08:40:20 executing program 4: syz_genetlink_get_family_id$nl802154(&(0x7f0000000880)='nl802154\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 08:40:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0x4c, 0x0, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x4c}}, 0x0) 08:40:20 executing program 1: clock_gettime(0x0, &(0x7f00000006c0)) 08:40:20 executing program 0: socket$packet(0x11, 0x658d85b1f86568ca, 0x300) 08:40:20 executing program 4: setresuid(0xee00, 0xee01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003c80)='/dev/rfkill\x00', 0x0, 0x0) 08:40:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0xffffff7f00000000) 08:40:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001d80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 08:40:20 executing program 3: timer_create(0x7, &(0x7f0000000140)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) 08:40:20 executing program 0: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x3}], 0x1, &(0x7f0000000040)={0x0, 0x989680}) 08:40:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)) 08:40:20 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x241, 0x0) 08:40:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) 08:40:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0xffffffff00000000) 08:40:20 executing program 3: rt_sigaction(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000180)) 08:40:20 executing program 0: r0 = gettid() rt_sigqueueinfo(r0, 0x11, &(0x7f00000002c0)) 08:40:20 executing program 1: setresuid(0xee00, 0xee01, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000280)) setresuid(r0, r1, r0) setresuid(0xee01, 0x0, 0x0) 08:40:20 executing program 2: ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/ttyS3\x00', 0x0, 0x0) 08:40:20 executing program 4: futex(&(0x7f0000000240), 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) 08:40:20 executing program 3: sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f0000000240), 0x81, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) 08:40:20 executing program 0: symlinkat(&(0x7f0000000500)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00') 08:40:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000240007ed8d5fa4a20500c50900000000", @ANYRES32, @ANYBLOB="000000005cd8a3f9f8ffffffff00000000090001008a66736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffff7e, &(0x7f0000000180)={0x0}}, 0x0) bind(r4, &(0x7f0000007b40)=@vsock={0x28, 0x0, 0x2710}, 0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x73) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="8100000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x300f828, [], [{}, {0x801, 0x0, 0x80000001}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000007d40)={'syztnl2\x00', &(0x7f0000007cc0)={'syztnl0\x00', r5, 0x29, 0x0, 0x9, 0x8, 0x62, @mcast1, @remote, 0x7800, 0x10, 0xcc, 0x4}}) sendmsg$nl_route(r2, &(0x7f0000007e40)={&(0x7f0000007bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000007e00)={&(0x7f0000007d80)=@newlink={0x64, 0x10, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc692}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x101}, @IFLA_MAP={0x24, 0xe, {0x8, 0x396, 0x2, 0x91ee, 0x1, 0x26}}, @IFLA_NET_NS_FD={0x8, 0x1c, r6}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007ed8d5fa4a20500c50900000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x380, 0x0, 0x1143c85c56f5c2ae, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7b6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xaa80}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x40, 0xea, 0x4, 0x100}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}]}}]}, 0x380}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r8, 0x1, 0x1, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:20 executing program 1: accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x81000) 08:40:20 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x313200) 08:40:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 08:40:20 executing program 0: r0 = socket(0x28, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001d40)={'syztnl0\x00', 0x0}) 08:40:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0x28, 0x0, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}]}, 0x28}}, 0x0) [ 913.921946][T18116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:21 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x937}, 0xe) 08:40:21 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) 08:40:21 executing program 2: ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000040)={0x0}) clock_settime(0x0, &(0x7f00000000c0)={0x77359400}) 08:40:21 executing program 0: r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x7f}) 08:40:21 executing program 1: futex(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0) [ 914.054846][T18131] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000d97f0000000004000380"], 0x18}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000800)={0x240, 0x0, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x1a}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}}}]}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x32}}}}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASK={0x60, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xfffffffffffffebc, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x98, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000854}, 0x8) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000600)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x0, 0xc9, 0x9, 0x2}}, 0x120) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, 0x0) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x10, 0x453, 0x8, 0x70bd2c, 0x25dfdbfc}, 0x10}}, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x20, 0x141d03) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, 0x0) 08:40:21 executing program 5: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e24, @local}, {0x2, 0x4e22, @private=0xa010101}, 0x100, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000)='ipvlan0\x00', 0x9, 0x7f, 0x9}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x1, 0x61, 0x7ff], 0x4, 0x800, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00', r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x80000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x2c}}, 0x8040) 08:40:21 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x8000, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) write$UHID_CREATE(r0, &(0x7f00000004c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000400)=""/153, 0x99, 0x400, 0x9, 0xfffffffd, 0xfffffffc, 0x3c31}}, 0x120) 08:40:21 executing program 0: pselect6(0x40, &(0x7f00000002c0), &(0x7f0000000300)={0x8}, 0x0, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0xf9a]}, 0x8}) 08:40:21 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001d00)='ns/user\x00') [ 914.192743][T18155] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 914.210787][ T9717] Bluetooth: hci0: command 0x0c26 tx timeout [ 914.220536][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 08:40:21 executing program 0: open$dir(&(0x7f00000002c0)='./file0\x00', 0x2040, 0x0) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x3cd801, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) 08:40:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000035c0)=""/4090, 0xffa}], 0x1}, 0x10140) [ 914.239083][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.241754][T18155] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 914.265815][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 08:40:21 executing program 0: r0 = gettid() capset(&(0x7f0000000080)={0x19980330, r0}, &(0x7f0000000040)) [ 914.303100][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.340026][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 08:40:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000480)={&(0x7f00000003c0), 0x5, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0xffffffffffffffc6}}, 0x0) [ 914.363794][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.380850][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.388679][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 08:40:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="90010000000201020000000000000000000000072c010a"], 0x190}}, 0x0) 08:40:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x11c}}, 0x0) [ 914.450373][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.480830][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.497566][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.514547][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.522413][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.530140][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.547616][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.562398][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.570431][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.591066][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.598837][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.619478][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.635094][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.649209][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.664153][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.677772][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.695308][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.703370][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.712704][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.720493][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.728570][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.738356][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.746261][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.755567][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.763357][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.772610][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.780440][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.788268][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.797539][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.805952][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.815072][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.822863][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.834129][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.842256][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.849995][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.857790][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.865842][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.873659][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.884249][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.892391][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.900275][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.908374][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.916369][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.924504][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.944552][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.953211][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.961183][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.968937][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.977615][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.985683][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 914.993880][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.009450][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.023985][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.032060][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.039802][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.051275][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 08:40:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001d80)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0}], 0x1, 0x0) 08:40:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001d80)=[{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2}], 0x1, 0x0) [ 915.059024][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.067346][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.078172][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.100816][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.108585][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.130810][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.138574][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.160921][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.168728][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.192274][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.200034][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.218278][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.227861][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.235800][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.249552][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.257425][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.265795][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.275327][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.290858][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.298597][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.306452][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.314218][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.321984][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.329762][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.350806][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.358556][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.370113][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.377923][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.385679][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.393437][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.401211][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.408932][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.417812][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.425658][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.433453][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.441260][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.449068][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.457286][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.465329][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.473369][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.481393][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.489150][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.497263][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.505219][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.514091][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.530707][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.540600][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.548685][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.556840][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.564815][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.572802][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.580664][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.588793][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.596815][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.604805][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.612698][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.620427][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.628535][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.636482][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.644511][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.652549][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.660431][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.668622][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.676681][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.684771][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.692768][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.700531][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.708684][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.716817][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.724937][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.733066][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.741114][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.749002][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.757041][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.765187][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.773331][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.781296][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.789074][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.797097][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.805084][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.813241][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.821234][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.828966][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.836967][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.845353][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.853310][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.861369][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.869244][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.877264][T17614] hid-generic 0400:0009:FFFFFFFD.0002: unknown main item tag 0x0 [ 915.885655][T17614] hid-generic 0400:0009:FFFFFFFD.0002: hidraw0: HID vffffff.fc Device [syz1] on syz1 08:40:22 executing program 5: ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x70bd26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x6) [ 915.919217][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 915.938976][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 915.948903][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 915.959972][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 915.974258][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 915.999398][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.032375][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.043966][T18221] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 916.061374][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.081170][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.100262][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.129971][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.140864][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.163803][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.179275][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.187399][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.195810][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.217631][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.234284][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.249843][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.266765][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.282553][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.290802][ T9118] Bluetooth: hci0: command 0x0c26 tx timeout [ 916.292362][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.326671][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.350193][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.376291][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.399825][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.423470][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.431637][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.439438][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.447592][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.455811][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.463973][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.472205][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.480174][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.488228][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.496241][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.504315][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.512487][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.520290][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.529415][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.537436][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.545560][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.561189][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.576715][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.595167][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.610831][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.618687][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.626886][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.634943][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.643046][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.651135][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.658953][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.667119][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.675167][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.683391][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.691378][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.699179][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.707294][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.715349][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.723454][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.732381][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.748048][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.764929][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.773107][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.781321][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.789310][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.797558][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.805673][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.813648][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.821872][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.829647][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.837689][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.845807][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.853860][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.861928][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.878810][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.894588][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.911459][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.927133][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.944036][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.959942][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.976755][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 916.993574][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.009341][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.026158][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.034322][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.042341][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.050198][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.058445][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.066493][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.074517][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.082751][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.090687][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.098839][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.106932][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.114961][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.122973][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.131082][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.138878][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.147089][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.155321][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.166427][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.183110][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.199892][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.216778][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.232473][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.241133][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.248948][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.257038][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.265152][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.273318][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.281552][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.289354][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.297825][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.305872][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.313953][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.322110][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.329894][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.338100][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.353787][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.369562][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.386252][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.403073][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.419816][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.435545][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.460814][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.468821][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.490821][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.498588][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.520909][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.528668][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.550816][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.558582][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.580863][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.588625][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.610834][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.619140][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.650847][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.658718][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.667863][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.675949][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.683997][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.691970][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.699695][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.707899][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.715816][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.723805][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.731781][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.739510][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.747646][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 08:40:24 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 08:40:24 executing program 0: setresuid(0xee00, 0xee01, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresuid(r2, r0, r1) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresuid(r3, r4, r5) 08:40:24 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) 08:40:24 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}}, 0x0) 08:40:24 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x208200, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 08:40:24 executing program 1: symlinkat(&(0x7f0000000500)='./file0\x00', 0xffffffffffffff9c, 0x0) [ 917.755736][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.763754][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.771946][T17614] hid-generic 0400:0009:FFFFFFFD.0003: unknown main item tag 0x0 [ 917.773716][T17614] hid-generic 0400:0009:FFFFFFFD.0003: hidraw0: HID vffffff.fc Device [syz1] on syz1 08:40:24 executing program 4: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x1000}, &(0x7f0000000100)={0x0, r0+10000000}, 0x0) 08:40:24 executing program 3: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f0000000100), 0x0) 08:40:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 08:40:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x14, 0x0, 0x0) 08:40:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:25 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400)='/dev/bsg\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0xc0189436, 0x0) 08:40:25 executing program 3: keyctl$set_reqkey_keyring(0xe, 0x1edfdb29a2047203) 08:40:25 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) 08:40:25 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='net/ptype\x00') sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x0) preadv(r1, &(0x7f00000017c0), 0x231, 0x7a00, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x400) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x3, 0x2, 0x3, 0x80, 0x0, 0x0, 0x10000, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x2, 0x2, 0x7, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80200, 0x0) 08:40:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f5ff00000000000000000100000020000180060001000a00000014000400fc0600"/46], 0x34}}, 0x0) 08:40:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/45, 0x2d}], 0x7, 0x0, 0x0) 08:40:25 executing program 0: prctl$PR_SET_MM_AUXV(0x23, 0xd, 0x0, 0x170) 08:40:25 executing program 1: msgget(0x2, 0x601) 08:40:25 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400)='/dev/bsg\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0xf0ffffff7f0000) 08:40:25 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/129, 0x1a, 0x81, 0x1}, 0x20) 08:40:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010079ac00000000000001f3ff0020000180060001000a00000014000400fc0600"/46], 0x34}}, 0x0) 08:40:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4040010, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) 08:40:25 executing program 2: socketpair(0x10, 0x2, 0x200, &(0x7f000000d780)) 08:40:25 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 08:40:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) msgctl$IPC_SET(0x0, 0xd, &(0x7f00000003c0)) 08:40:25 executing program 3: prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x7) 08:40:25 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000027c0)='/dev/vcsa#\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 08:40:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000002100010001000000000000000a000000000000000000000005001500247efbcf"], 0x38}}, 0x0) 08:40:25 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6000f374bf30f6241c8893791e529ecabd"], 0x2000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb}) 08:40:25 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0xa0aa4572b9f3535a) 08:40:25 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300fdff00080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x6}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x9}}}]}]}]}}]}, 0x50}}, 0x0) [ 918.405967][T18313] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 08:40:25 executing program 0: rt_sigqueueinfo(0xffffffffffffffff, 0x0, &(0x7f0000003600)) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 08:40:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) r3 = openat$incfs(r2, &(0x7f0000000080)='.pending_reads\x00', 0x80300, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000007d40)={'syztnl2\x00', &(0x7f0000007cc0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x9, 0x8, 0x62, @mcast1, @remote, 0x7800, 0x10, 0xcc, 0x4}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000007e40)={&(0x7f0000007bc0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000007e00)={&(0x7f0000007d80)=@newlink={0x60, 0x10, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc692}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_MAP={0x20, 0xe, {0x8, 0x396, 0x2, 0x91ee, 0x1, 0x26}}, @IFLA_NET_NS_FD={0x8}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007ed8d5fa4a20500c50900000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x54, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c014}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0xf8, 0x0, 0x8, 0x501, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xaf9}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7132}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x62a}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0xf8}}, 0x1050) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000ed7466c088a9352a218d19513b3cd951d05f0e9b583f5d5feb415ff4531b27e52c53efeca1ec2197092a441b0a05becd232ce2e257b4948fa57800000091d7cef0ed9b6a6089b3d7bc35fd943b54a4721326f7bdaa0e8ec63561cde3ea76863572d6b4", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x140, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x33}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x10, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "61055af744b658cbcddd9d2c4cf378b94236f5682baec18d"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6tnl0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond_slave_0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x8001) fcntl$setlease(r2, 0x400, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00', r2) 08:40:25 executing program 2: pselect6(0x40, &(0x7f0000004880)={0x40}, 0x0, 0x0, 0x0, &(0x7f00000049c0)={0x0}) 08:40:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000100)={0x4}, 0x4) 08:40:25 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0xb, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 08:40:25 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f00000001c0), 0x8}) [ 918.702712][T18336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 08:40:25 executing program 0: rt_sigaction(0x31, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 08:40:25 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, r1}, 0x10) 08:40:25 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=@framed={{}, [], {0x95, 0x61}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x97, &(0x7f0000000100)=""/151, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 918.744332][T18342] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 08:40:25 executing program 3: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x1000}, 0x0, &(0x7f0000000180)={0x0}) 08:40:25 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x23, 0x0) 08:40:25 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000023c0)='/dev/zero\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0xffffffffffffffac) 08:40:25 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0xe, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:40:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYBLOB="010000000000000000000100000020000180060001000a0000000000000000000004000000"], 0x34}, 0x1, 0x0, 0x0, 0x40003}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00', r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xe0, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x6}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x37}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x20010880) 08:40:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:40:26 executing program 4: r0 = getpid() r1 = getpid() kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0) 08:40:26 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) 08:40:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000621b", 0x66, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000d8f4655fd9f4655fd9f4655f000000000000040008", 0x1d, 0x22080}], 0x0, &(0x7f0000014900)) 08:40:26 executing program 1: prctl$PR_SET_MM_AUXV(0x1c, 0xc, 0x0, 0x0) 08:40:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, &(0x7f0000000280)="46a1d75d008e85364a6e9792a21c151db3f9d64b71589afd4ce497ff4b1ac24e97c54f7f2825e8b628810bdb704a313bc0af581c60960d9754ef406577969686cb3531fbb020098df8e10f6f83b9799e555144aa2b7810198780654e121f4bc7e2bbb8688a8eb81e9d74f174573524f56d32e7a6820d99", 0x77, 0x0, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 08:40:26 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="850000002800000018000000ff01000000000000010000001800000008000000000000000100000005a401001400000085100000feffffff181400", @ANYBLOB="000000000003"], &(0x7f00000004c0)='syzkaller\x00', 0x5, 0xfe, &(0x7f0000000500)=""/254, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:40:26 executing program 1: setresuid(0x0, 0xee01, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000002180)='ns/pid_for_children\x00') 08:40:26 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000014c0)=""/37, 0x25) 08:40:26 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) [ 919.226988][T18384] loop2: detected capacity change from 0 to 544 [ 919.256272][T18384] EXT4-fs (loop2): filesystem is read-only 08:40:26 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x200403, 0x0) [ 919.314875][T18384] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 08:40:26 executing program 4: prctl$PR_SET_MM_AUXV(0x29, 0xc, 0x0, 0x0) 08:40:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000621b", 0x66, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000d8f4655fd9f4655fd9f4655f000000000000040008", 0x1d, 0x22080}], 0x0, &(0x7f0000014900)) 08:40:26 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000023c0)='/dev/zero\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 08:40:26 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) 08:40:26 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 08:40:26 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2, &(0x7f0000000000)=@raw=[@alu, @ldst], &(0x7f0000000040)='GPL\x00', 0x0, 0xde, &(0x7f0000000080)=""/222, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:40:26 executing program 4: setuid(0xee00) openat$bsg(0xffffffffffffff9c, &(0x7f0000011640)='/dev/bsg\x00', 0x0, 0x0) 08:40:26 executing program 1: socketpair(0x11, 0x0, 0x0, &(0x7f0000000100)) 08:40:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0xf8, 0x0, 0x8, 0x501, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xaf9}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7132}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x62a}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0xf8}}, 0x1050) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r6, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000ed7466c088a9352a218d19513b3cd951d05f0e9b583f5d5feb415ff4531b27e52c53efeca1ec2197092a441b0a05becd232ce2e257b4948fa57800000091d7cef0ed9b6a6089b3d7bc35fd943b54a4721326f7bdaa0e8ec63561cde3ea76863572d6b4", @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x220080d0}, 0x20000081) 08:40:26 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x1, &(0x7f0000000000)=@raw=[@alu], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 919.520902][T18417] loop2: detected capacity change from 0 to 544 08:40:26 executing program 3: mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x1020, 0x0) 08:40:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={0x0}}, 0x0) [ 919.574651][T18417] EXT4-fs (loop2): filesystem is read-only 08:40:26 executing program 1: shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) [ 919.618188][T18417] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 08:40:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000621b", 0x66, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000d8f4655fd9f4655fd9f4655f000000000000040008", 0x1d, 0x22080}], 0x0, &(0x7f0000014900)) 08:40:26 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x9}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x97, &(0x7f0000000100)=""/151, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:40:26 executing program 1: shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) 08:40:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x9a0000, 0xfff, 0xfffffffc, r0, 0x0, &(0x7f0000000080)={0x990a6f, 0x3, [], @string=&(0x7f0000000300)=0x1}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0100008014d3010292f4ef5136f9dc9d33135b70e96473fed50c3ad65bda7efb4c4df510c5471906ca99030000003aabd240c9831f000000000000002385ba159573ec7cd761a39de42c65d5dc23f37d2703c58fc185fb599d84404ca431a6bfb7000054859c0fa5aa846f3158b9e6c2601a4cb3c96e35c66c6d6f026d03b80a5b5850d24fce40c9a1cc758e7b0f1927fc64d953d73e0e3ff2c89531690b3b8245b3013e92d5f7ee7dec9da1abbea9392170a6a14079ff9e5cb854860521b8d022b19c395959386e5fc6bc61de5089ee25143c47c2a7bfe58ffeb15fb91c9e1c4f8348e80f98fb2d19e64cf8ef57dd734f42876ea7c360119ec724ef6e1bf97c5070a93ca64ec3b46a5ba58311b331f9d7bf", @ANYRES32=r1, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600"/46, @ANYRESOCT=r0], 0x34}}, 0x8041) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x64, 0x10401) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) r4 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r6, 0x400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000005c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x97, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, @in6={0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, [], 0x12}, 0x7}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x3, @private2, 0x2779}], 0x74) fcntl$setlease(r5, 0x400, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00', r4) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8044) 08:40:26 executing program 3: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004000000c0b80f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x801, 0x1001}, {&(0x7f0000000140)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0/../file0\x00', 0x419302, 0x0) 08:40:26 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1838"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:40:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000040), 0x4) 08:40:26 executing program 1: shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) 08:40:26 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000200), 0x48) 08:40:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0xe, 0x6, 0x801}, 0x14}}, 0x0) 08:40:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000180)=0x2c) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r3, 0x400, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc26000000000000000000000000000047a8225617f2777caa6e254ce4b2bfe14b090d11adfa6bcb31d360bd74e5f94a71d5612447cb4f6963166ca1f8bd5728e2e1484cc7edadad31c6a1aa678adc74df5646351ba7d9be3a1f56bb8a"], 0x34}}, 0x0) [ 919.841755][T18456] loop2: detected capacity change from 0 to 544 [ 919.876339][T18456] EXT4-fs (loop2): filesystem is read-only 08:40:27 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400)='/dev/bsg\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 919.972981][T18456] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 08:40:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d9f4655fd9f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000621b", 0x66, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100000d8f4655fd9f4655fd9f4655f000000000000040008", 0x1d, 0x22080}], 0x0, &(0x7f0000014900)) 08:40:27 executing program 1: shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) 08:40:27 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0}) 08:40:27 executing program 1: pipe2(0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000001640)='wireguard\x00', 0xffffffffffffffff) 08:40:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0xe, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 08:40:27 executing program 4: pipe2(&(0x7f0000000140), 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000001640)='wireguard\x00', 0xffffffffffffffff) 08:40:27 executing program 5: r0 = syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x9, &(0x7f0000000540)=[{&(0x7f0000000080)="61f8a3f7680ae5dc283989adb8ad6c0e0c888d185374e9fa629ef128a3943385fb6f836099c56aa85732dfdb8a801b911d9dd29e1a32bddb086bce1420fcac88", 0x40, 0x20}, {&(0x7f00000000c0)="b2abfafc29b812e21cd1554cbffab8a0cb81", 0x12, 0xf1}, {&(0x7f0000000180)="c253a24bd4e485a958592716b359a19888faacfc698b2fdea18f39a15b21a73aaaf4df631c099a3ad0970b800edefe26239489dd7e6833602854a9223e78de44cf3ad5b3a55beda5364e77ae4f23f23de233c216f03a49d3", 0x58, 0x4}, {&(0x7f00000002c0)="d1326f98c8562ab833449713b4b1dbeb32d56abe319c5bac4303434d9eadd509df7aa73a86ec72648bf0388332c23dcc9cbb3337db6f71fbb2e51e577865775d17b2f2ebf90aa68db38cd6b97ae82f564bbd196e740368fc2c05a135e9b5f221632b881906fb366c311a3618f3973279e205069da1d2a41b9d0ff581d743615fc397c3b4049eae89b7bcd7e35d867295d9af2daf654e6182350e77a981f2f765d6b08042baafd6b51f9dd35e027f413521116b6135b4ff0353a5c0ef8ab707f037f7c5f30d58419c1c0b454c", 0xcc, 0xfff}, {&(0x7f0000000200)="4a4305cab6c884a9a64d5266d396d3464a938503b53203ae6b752386e7d78a867ce8091b94ecda72fa679a1b0ec79d0b2c28ca923025d582c0e08aa98ebfc25694a69d3c5e18dbec3233", 0x4a, 0x541e}, {&(0x7f00000003c0)="82768d319d2d9241da7a24f258c5681b1d6fe27bb4dc5c662b70e7d15b41c2f0d8a9c05d0f9ddb21ea94d21657b3eff3195d75bb7717e322059eec9bc8ef418b94baff2e95510803afebc7f3dccbaa128c1621", 0x53, 0xfffffffffffffff8}, {&(0x7f0000000440)="2d9a981a36eec7d1a8ad0bb41dc179b618640385b0b41845562a6afde4950ad79ed70f3be27a85b60a8010b94a9a7ba459a1ff59b3d159597202a1cee77c14b96893da8ed4c1510c2889a50b6ab5", 0x4e, 0x8}, {&(0x7f00000004c0)="b8cdd0e85cbe1f76a27805fcf63d02f46fda67c678a29e25", 0x18, 0x1ff}, {&(0x7f0000000500), 0x0, 0x2}], 0x8800, &(0x7f0000000640)={[{'mptcp_pm\x00'}, {'mptcp_pm\x00'}, {}, {}, {'mptcp_pm\x00'}, {}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@obj_role={'obj_role', 0x3d, '@\\!'}}, {@smackfsroot={'smackfsroot', 0x3d, 'mptcp_pm\x00'}}, {@obj_user={'obj_user', 0x3d, '\''}}]}) name_to_handle_at(r0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x95, 0xff, "1f7fe0fdfbb692ccbf066df2bf90284160221b2ff4954ccd7bb32ae0d04abab3eafdce8bf78707cd0f51a6a9ed4ee0373a47470cf384d93268d43874ccaf3d35d73a5867bce395bed95f8d12a37b11528ac0294c7e398d672c4906c4bda609ba835ca518905b692f0074ac762717520a0d409a0414dc18643aa82be33b4164a176dbc5d21990ccc4f08cece5a6"}, &(0x7f00000007c0), 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000300000030000180160001006574683a7665746831ecfce0ac1c5936adec44820ce9fb972e5f746f5f626f6e"], 0x44}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000a00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a8, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff81}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "81b7ae226b2c63c9445d353686d0ddea302fd827"}}, @TIPC_NLA_NODE_ID={0xdb, 0x3, "81ccf73b56b0fffe125cadf8bb86d403eb513c40c2c26a958f0412a71d61716bdc359cd7616ea21abd1a5c3cc1526421a80007955a81f3e359549ea0da9af357e3cd939ebf1acdda2c35baf4c1549fd9a3f945ed990d372330fdc6be3b59fb46be1d883a9036a22efcc1dafa36b1737e0ffcd2f8ac5bc907e9dd91c41e99356b417c0177b1f8b701d1f091d3329e2c55abffb25986f96f121954cd6e0503a015dc14e4b201b602b55b94c6bafaf971dab55ab97b06eddb5a4c0d8f240c3f344daecaeaca9c5ef71a51a2866f77b283d2aa4a759b5718d1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}]}, 0x1a8}}, 0x40000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, &(0x7f0000000080)=@xdp, &(0x7f0000000100)=0x65) 08:40:27 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000023c0)='/dev/zero\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x10000000) [ 920.220482][T18491] loop2: detected capacity change from 0 to 544 [ 920.236827][T18491] EXT4-fs (loop2): filesystem is read-only [ 920.243537][T18495] loop5: detected capacity change from 0 to 16383 08:40:27 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 920.264171][T18491] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 08:40:27 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000080)=@framed={{}, [@map, @exit, @jmp]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 920.336857][T18506] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 920.357957][T18506] tipc: Enabling of bearer rejected, illegal name 08:40:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth0_to_hsr\x00'}) 08:40:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012001, 0x0) 08:40:27 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "d3"}]}}, &(0x7f00000000c0)=""/129, 0x2a, 0x81, 0x1}, 0x20) [ 920.394843][T18495] loop5: detected capacity change from 0 to 16383 [ 920.478079][T18495] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 920.493076][T18495] tipc: Enabling of bearer rejected, illegal name 08:40:28 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 08:40:28 executing program 4: socketpair(0x26, 0x0, 0x0, &(0x7f0000000080)) 08:40:28 executing program 3: syz_open_dev$vcsa(&(0x7f00000027c0)='/dev/vcsa#\x00', 0x0, 0x594d7954403ddceb) 08:40:28 executing program 1: prctl$PR_SET_MM_AUXV(0x21, 0xc, 0x0, 0x170) 08:40:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'ipvlan0\x00'}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:28 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x2, &(0x7f00000004c0)=@raw=[@btf_id], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:40:28 executing program 4: pselect6(0x40, &(0x7f0000004880), 0x0, 0x0, &(0x7f0000004940), &(0x7f00000049c0)={&(0x7f0000004980), 0x8}) 08:40:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000dc0)=@ethtool_ringparam={0xb}}) 08:40:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x34, 0x2a, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) 08:40:28 executing program 3: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/223) 08:40:28 executing program 4: io_setup(0xff, &(0x7f0000002280)=0x0) io_destroy(r0) 08:40:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x4, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:28 executing program 0: io_setup(0xff, &(0x7f0000002280)=0x0) io_getevents(r0, 0x1, 0x1, &(0x7f0000000300)=[{}], &(0x7f0000000400)={0x0, 0x3938700}) 08:40:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000dc0)=@ethtool_ringparam={0xb}}) 08:40:28 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) io_setup(0x0, &(0x7f0000000ac0)) 08:40:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 08:40:28 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x400000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) write$sequencer(r0, &(0x7f0000000040)=[@n={0x1, 0x1, @generic=0x3, 0x6}, @n={0x3, 0x8, @SEQ_NOTEON=@note=0x16, 0x52}, @t={0x40, 0x1, 0x2, 0x1}], 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:28 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000004680)='ns/user\x00') dup3(r0, 0xffffffffffffffff, 0x0) 08:40:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x7, 0xffffffffffffffff, 0x0) 08:40:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000dc0)=@ethtool_ringparam={0xb}}) 08:40:28 executing program 4: openat$autofs(0xffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x88c81, 0x0) 08:40:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x334, 0x0, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6_vti0\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'macvtap0\x00', {0x8000, 0x0, 0x66, 0x0, 0x0, 0x3, 0x8, 0xd92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x390) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x9, 0x3, 0x344, 0x220, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c0, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'wg1\x00', {0x0, 0x5, 0x0, 0x0, 0x0, 0x7fff, 0x6}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@loopback, @private, 0x0, 0x0, 'ip6erspan0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3a0) 08:40:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6, [], 0xff}}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x108, 0x0, 0x62a, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0xeb, 0x45, "2f84a2d7f98ffad70f33149f4bcd75e14acbcdae5dedb6e1442814ee90a12e4040208724a6b78849f074a5a1cf22a91bf1abd7712c66f073dc7e42a2280a8233158d5c86f177069baf4c06bb898101ea09bf12bf975d0eaaa8b87c515ee5016669ac3391ab5eb9223735b7b5b21974ac3a6398513b9bccf5af9595fa1c99ca8b8899285288c1b2c4e80f0ca0b6dfc959941fd61e9760e3ab7b6e262830f38c3c8342f589754bb4d27f00ac0a7237ab2e3657198250ff3202b4ad45e6e7c09c480e8ee8507f1ffa7b4fa6278ab226539bf88a514de142c6d4bfc5f9cb009c662b2078a001c57361"}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 08:40:28 executing program 2: add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) 08:40:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x1000) 08:40:28 executing program 4: signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) 08:40:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000dc0)=@ethtool_ringparam={0xb}}) 08:40:28 executing program 2: sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) 08:40:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x824b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) 08:40:28 executing program 0: io_setup(0xff, &(0x7f0000002280)=0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000002300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x4, 0x0, 0x1, r2}]) 08:40:28 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:40:28 executing program 2: io_setup(0xff, &(0x7f0000002280)) io_setup(0x8587, &(0x7f0000000ac0)) 08:40:28 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x5, 0x2}, 0x10}}, 0x0) 08:40:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r4, 0x400, 0x0) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "9e3c25a066d33b76588e3c6d35cc"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xa8, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040010}, 0x8000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x20, 0x1410, 0x2, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4880) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x33f5a65fc380d992}, 0xc, &(0x7f0000000c00)={&(0x7f0000000380)={0x850, 0x0, 0x610, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x53c, 0x11d, 0x0, 0x1, [{0x4e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x1, 0x6, 0xfffb, 0x7f, 0x8001, 0x7, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x7f, 0x1, 0x4, 0x5, 0x7, 0x800, 0x7]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x3}, {0x2, 0x1}, {0x1, 0x3}, {0x7, 0x5}, {0x2, 0x8}, {0x3, 0x7}, {0x4}, {0x7, 0x5}, {}, {0x6, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x7}, {0x1, 0x5}, {0x0, 0x5}, {0x1}, {0x2, 0x7}, {0x1, 0x1}, {0x1, 0x9}, {0x0, 0x9}, {0x1}, {0x1, 0x7}, {0x0, 0x9}, {0x0, 0x7}, {0x3, 0xa}, {0x5, 0x4}, {0x0, 0x5}, {0x6, 0x4}, {0x3, 0xa}, {0x1, 0x6}, {0x3}, {0x0, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x18, 0xc, 0x48, 0x9, 0x48, 0x6, 0x4, 0x1, 0x6c, 0x36, 0x60, 0x48, 0x3, 0x5, 0x5, 0x12, 0xc, 0x2, 0x30, 0x48, 0x2, 0x3, 0x18, 0x2, 0x60, 0x2, 0x6, 0x60]}, @NL80211_TXRATE_HT={0x12, 0x2, [{}, {0x0, 0x8}, {0x3, 0x3}, {0x5, 0x7}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0xa}, {0x4, 0x6}, {0x6, 0x3}, {0x7, 0x6}, {0x5, 0x1}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0x3}]}]}, @NL80211_BAND_60GHZ={0xfc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x7}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x1}, {0x1, 0xa}, {0x3, 0x1}, {0x1, 0xa}, {0x4}, {0x6, 0x7}, {0x3, 0x4}, {0x4, 0x8}, {0x1, 0x5}, {0x4, 0x4}, {0x5, 0xa}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0x9, 0x9, 0x12, 0x24, 0x18, 0x24, 0x1b, 0x16, 0x5, 0x6, 0x1, 0x16]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0xc, 0x4, 0x1b, 0x30, 0xc, 0x2, 0x2, 0x30, 0x36, 0x60, 0x1, 0x12, 0xc, 0x4, 0x3, 0x9, 0x48, 0x1b]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x6, 0x6}, {0x1, 0x8}, {0x6, 0x3}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0xa}, {0x7, 0x4}, {0x3, 0x8}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {0x6}, {0x1, 0x4}, {0x2, 0x9}, {0x2, 0x9}, {0x5, 0xa}, {0x7}, {0x3, 0x1}, {0x1}, {0x3, 0x6}, {0x1, 0x6}, {0x3, 0x5}, {0x4, 0x1}, {0x1, 0x5}, {0x5, 0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x6, 0xa}, {0x0, 0x2}, {0x2, 0x1}, {0x4, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x6, 0x9}, {0x6, 0x3}, {0x3, 0x3}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0xa}, {0x2, 0x7}, {0x0, 0x7}, {0x4, 0x3}, {0x6, 0x7}, {0x4, 0xa}, {0x7, 0x7}, {0x5, 0x1}, {}, {0x2, 0x6}, {0x5, 0x5}, {0x2, 0x3}, {0x4, 0xa}, {0x4}, {0x4, 0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0x9}, {0x1, 0x2}, {}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x5}, {0x5, 0x9}, {0x3, 0x9}, {0x7, 0x3}, {0x3, 0x8}, {0x3, 0x5}, {0x1, 0x3}, {0x1, 0x4}, {0x4, 0x2}, {0x6, 0x2}, {0x6, 0x7}, {0x1, 0x7}, {0x1, 0x3}, {0x2}, {0x5, 0x5}, {0x6, 0x4}, {}, {0x4}, {0x1}, {0x4, 0x8}, {0x1, 0x4}, {0x4}, {0x1, 0x5}, {0x2, 0x9}, {0x2, 0xa}, {0x1, 0x6}, {0x1, 0x7}, {0x5}, {0x3, 0xa}, {0x4, 0x3}, {0x3, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x5, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x4, 0x5}, {0x4}, {0x1, 0xa}, {0x2, 0xa}, {0x7, 0xa}, {0x6, 0x7}, {0x6, 0x5}, {0x0, 0xa}, {0x4, 0x2}, {0x1, 0x2}, {0x6, 0x2}, {0x2, 0x4}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x8, 0x5, 0x80, 0x401, 0x1000, 0x9, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x18, 0x9, 0x16, 0x12, 0x1b, 0x3, 0x3, 0x60, 0x48, 0x5, 0x24, 0x36, 0x4, 0x0, 0x4, 0x24, 0x12, 0x30, 0x4, 0x36, 0x9, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0xc]}]}, @NL80211_BAND_60GHZ={0xe8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x16, 0x3, 0x9, 0xb, 0x1, 0x48, 0x2, 0x1b, 0x0, 0xc, 0x30, 0x24, 0x48, 0x60, 0x1, 0x6, 0x5, 0x1b, 0x48, 0xc, 0x5, 0x48, 0x30, 0x16]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2}, {0x4, 0x4}, {0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x1}, {0x6, 0x4}, {0x0, 0x1}, {0x0, 0x6}, {0x3}, {0x3, 0xa}, {0x4, 0x8}, {0x0, 0x8}, {0x3, 0x8}, {0x2, 0x2}, {0x2, 0x1}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x5, 0x8}, {0x6, 0x7}, {0x3, 0x9}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0xa}, {0x4, 0x7}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0xa}, {0x3, 0x5}, {0x5, 0x5}, {0x1, 0x1}, {0x2, 0x4}, {0x4, 0x8}, {0x5, 0x1}, {0x7, 0x9}, {0x1, 0x1}, {}, {0x4, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x3, 0x5, 0xb, 0x30, 0x16, 0x24, 0x9]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x3, 0xa}, {0x3, 0x3}, {0x4, 0x4}, {0x0, 0xa}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x7, 0x2}, {0x0, 0x4}, {0x1, 0x8}, {0x5, 0x9}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x8}, {0x5, 0x2}, {0x1, 0x7}, {0x6, 0x9}, {0x2}, {0x4, 0x2}, {0x6, 0x3}, {0x2, 0x5}, {0x1}, {0x4, 0xa}, {}, {0x7, 0x5}, {0x1, 0x7}, {0x3, 0x1}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x0, 0x1, 0x4, 0x5, 0x1, 0xadc, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x1e, 0x5, 0x60, 0x3, 0x3, 0xb, 0x24, 0x3, 0x36, 0x4, 0x2, 0x12, 0x1, 0x3, 0x24, 0x1, 0x12, 0x30, 0x39, 0x6, 0x16, 0x4, 0x12, 0xb, 0x69, 0xd]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x18, 0x4, 0x6c, 0x30, 0x9, 0x2, 0x16, 0x60, 0xb, 0x2, 0x12, 0x18, 0x6, 0x1b, 0x16, 0x3a, 0x1c95047176b19c0d, 0x30]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x24, 0x24, 0x16, 0x6, 0x2, 0x1b, 0x1, 0x24, 0x4, 0x65, 0x36, 0x5, 0x3, 0x5, 0x16, 0x6, 0x2, 0x2, 0x36, 0x6]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x5, 0xa}, {0x5, 0x3}, {0x3, 0x9}, {0x2, 0x7}, {0x1, 0x2}, {0x4, 0x3}, {0x2, 0xa}, {0x5, 0x8}, {0x7, 0x8}, {0x0, 0x5}, {0x7, 0x4}, {0x3, 0x4}, {0x0, 0x9}, {0x7, 0x3}, {0x1}, {0x7, 0x7}, {0x3, 0x7}, {0x4, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x5}, {0x7, 0x5}, {0x3, 0xa}, {0x4, 0x8}, {0x2, 0x9}, {0x0, 0x9}, {}, {0x4, 0x3}, {0x7, 0x1}, {0x1, 0x1}, {0x5, 0xa}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x9}, {0x4, 0x2}, {0x0, 0x7}, {0x6, 0x7}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x1}, {0x0, 0x8}, {0x4, 0x2}, {0x5, 0x4}, {0x3, 0x5}, {0x1, 0x5}, {0x3, 0x2}, {0x3, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x2, 0x9}, {0x0, 0x4}, {0x6, 0x2}, {0x5, 0x6}, {0x6, 0x2}, {0x1, 0xa}, {0x5, 0x9}, {0x0, 0x3}, {0x1, 0x4}, {0x4, 0x3}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x4}, {0x0, 0x2}, {0x2, 0x7}, {0x6, 0x3}, {0x1, 0x5}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x8}, {0x2, 0x9}, {0x6, 0x2}, {0x2, 0x4}, {0x3, 0xa}, {0x7, 0x2}, {0x1, 0x9}, {0x3, 0x7}, {0x1, 0x4}, {0x3, 0x9}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x0, 0x8000, 0x6b, 0x7, 0xffff, 0x7f]}}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0xa}, {0x5, 0x2}, {0x0, 0x4}, {0x7, 0x4}, {0x4, 0x3}, {}, {0x0, 0x5}, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x4}, {0x5, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x2, 0x2}, {0x2, 0x7}, {0x2}, {0x0, 0x4}, {0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x4, 0x5}, {0x0, 0x7}, {0x7, 0x3}, {0x2, 0x5}, {0x2, 0x9}, {0x6, 0x4}, {0x3, 0x9}, {0x1}, {0x1, 0x1}, {0x0, 0x5}, {0x2}, {0x6, 0x8}, {0x3, 0x3}, {0x2, 0x1}, {0x5, 0xa}, {0x2, 0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x9}, {0x6, 0x8}, {0x6, 0x9}, {0x6, 0x1}, {0x4, 0x9}, {0x1, 0x4}, {0x1, 0x2}, {0x2, 0x4}, {0x0, 0x5}, {0x5, 0x9}, {0x2, 0x5}, {0x7}, {0x0, 0x8}, {0x0, 0xa}, {0x3}, {0x1, 0x5}, {0x2, 0x3}, {0x7, 0x2}, {0x0, 0xa}, {0x7, 0x4}, {0x6, 0x1}, {0x6}, {0x6, 0x7}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6c, 0x0, 0xc, 0x9, 0x9, 0x2d, 0x0, 0x12, 0x30, 0x36, 0x6c, 0x35, 0x5]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x9}, {0x3, 0x8}, {0x0, 0x3}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x3}, {0x5, 0x7}, {0x0, 0x8}, {0x2, 0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x7}, {0x5, 0x9}, {0x6, 0xa}, {0x3, 0xa}, {0x3, 0x4}, {0x6, 0x6}, {}, {0x6, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x4, 0x5}, {0x0, 0xa}, {0x5, 0x7}, {0x3}, {0x0, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x2, 0x1}, {0x7, 0x8}, {}, {0x7, 0x2}, {0x4, 0xa}, {0x7, 0x8}, {0x6, 0x6}, {0x4, 0xa}, {0x6, 0x4}, {0x4, 0x4}, {0x1}, {0x6, 0x3}, {0x6, 0x5}, {0x5}, {0x1, 0x9}, {0x2, 0x6}, {0x2, 0x6}, {0x7, 0x2}, {0x4, 0x6}, {0x4, 0xa}, {0x2, 0xa}, {0x0, 0xa}, {0x1, 0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x1, 0xa}, {0x6, 0x3}, {0x0, 0x5}, {0x5, 0x5}]}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x16, 0x1, 0x1b, 0x48, 0x16, 0x6c, 0x16, 0x36, 0x5, 0xb, 0x21, 0x60, 0x18, 0x60, 0x1, 0x6, 0x16, 0x17, 0x1b, 0xc, 0x16, 0x0, 0x16, 0x0, 0x18, 0x75, 0x0, 0x36, 0x4, 0x3, 0xec]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x16, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x6, 0x9, 0x6, 0x3, 0x0, 0x24, 0x4, 0x4, 0x0, 0x6, 0x6c, 0x9, 0xb, 0x3, 0xb, 0x4, 0x3, 0xc, 0x24, 0x2, 0x48, 0x36, 0x4, 0x36, 0x4, 0x30, 0x6, 0x6c, 0x24, 0x1b]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x3, 0x48, 0x1b, 0xb, 0x1, 0x12, 0x6, 0x18, 0x36, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x9}, {0x7, 0xa}, {0x5}, {0x5, 0x7}, {0x5, 0xa}, {0x1, 0x8}, {0x6}, {0x0, 0x4}, {0x3, 0x6}, {0x2, 0x6}, {0x4, 0x1}, {0x1, 0x4}, {0x0, 0x7}, {0x6, 0x5}, {0x5, 0xa}, {0x2, 0x2}, {0x4, 0x4}, {0x2, 0x1}, {0x0, 0x2}, {0x2, 0x1}, {0x7, 0x4}, {0x3, 0x6}, {0x0, 0x2}, {0x3, 0x3}, {0x3, 0x3}, {0x6, 0x6}, {0x2, 0x4}, {0x2, 0x9}, {0x3, 0x7}, {0x4, 0x3}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x5}, {}, {0x1}, {0x6, 0x3}, {0x3, 0x5}, {0x7, 0x3}, {0x6, 0x8}, {0x3, 0x7}, {0x0, 0x3}, {0x0, 0xa}, {0x6, 0x2}, {0x5, 0x9}, {0x3, 0x7}, {0x6}, {0x2}, {0x6, 0x7}, {0x3, 0x3}, {0x5, 0x4}, {0x1, 0x2}, {0x5}, {0x7, 0x7}, {0x5, 0xa}, {0x5, 0x5}, {0x5, 0x9}, {0x6}, {0x1, 0x7}, {0x5, 0x8}, {0x5}, {0x6, 0x1}, {0x6, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x5, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x36, 0x36, 0x4, 0x6c, 0x24, 0x6, 0x4, 0x16, 0x1b, 0x36, 0x60, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x31, 0x5, 0xff, 0x1, 0x4, 0x0, 0x40, 0x2]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x9}, {0x4, 0x6}, {0x3, 0x6}, {0x1, 0x3}, {0x2, 0x2}, {0x2, 0x3}, {0x5, 0x8}, {0x1}, {0x7, 0xa}, {0x4, 0x9}, {0x2, 0xa}, {0x0, 0x4}, {0x4, 0x4}, {0x7}, {0x2, 0x3}, {0x0, 0x4}, {0x5, 0xa}, {0x2, 0x3}, {0x4}, {0x1, 0x6}, {0x1, 0x5}, {0x3}, {0x4, 0x7}, {0x5, 0x6}, {0x4, 0x4}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0xf53, 0x20dd, 0x0, 0x40, 0x1ff, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x6c]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x98}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x66}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x2e4, 0x11d, 0x0, 0x1, [{0x2c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x288, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x5, 0x6}, {0x5, 0x7}, {0x7, 0x5}, {0x7, 0x4}, {0x5, 0x9}, {0x1, 0x9}, {0x6, 0x5}, {0x3}, {0x4, 0x7}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x7}, {0x7, 0xa}, {0x3, 0x3}, {0x5, 0x3}, {0x0, 0x5}, {0x3, 0x2}]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0xa}, {0x5, 0x1}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x1, 0x8}, {0x4, 0x8}, {}, {0x5, 0xa}, {0x2, 0x9}, {0x0, 0x5}, {0x3, 0x3}, {0x5, 0x5}, {0x5, 0xa}, {0x4, 0x5}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0xa}, {0x7, 0x1}, {0x0, 0xa}, {0x3, 0x6}, {0x4, 0x9}, {0x6, 0x8}, {0x0, 0x6}, {0x3, 0xa}, {0x2, 0x4}, {0x1}, {0x3, 0x7}, {0x4, 0x4}, {0x6, 0x9}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x2, 0x8}, {0x5}, {0x2, 0x2}, {0x4, 0x2}, {0x7, 0x5}, {0x2, 0x8}, {0x7, 0x4}, {0x0, 0x2}, {0x6, 0x4}, {0x4}, {0x4, 0x3}, {0x5, 0x3}, {0x2, 0x3}, {0x0, 0x2}, {0x4, 0x3}, {0x0, 0x9}, {0x7, 0x8}, {}, {0x1}, {0x2, 0xa}, {0x0, 0x8}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x4, 0x7fff, 0x91f, 0x81, 0x6, 0x0, 0x2]}}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x4, 0x1, 0x3, 0x81, 0x7dd, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x5}, {0x4}, {}, {0x6, 0x9}, {0x6}, {0x5, 0x7}, {0x6, 0x8}, {0x1, 0x4}, {0x4, 0x2}, {0x7}, {0x4, 0x6}, {0x2, 0x7}, {0x7, 0x6}, {0x5}, {0x4, 0x3}, {0x5, 0xa}, {0x7, 0x7}, {0x0, 0x6}, {0x7, 0x1}, {0x3, 0x6}, {0x6, 0x3}, {0x0, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x4, 0x9}, {0x7, 0x2}, {}, {0x0, 0x4}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x5}, {0x0, 0x2}, {0x5, 0x5}, {0x3, 0x5}, {0x4, 0x5}, {0x6, 0x3}, {0x4, 0x8}, {0x3, 0x8}, {0x5, 0x5}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0f7, 0x0, 0x9, 0x9, 0xfff7, 0x6, 0x1]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x35]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x24, 0x3, 0x2254f2c672179360, 0x9, 0x30, 0x30, 0x6, 0x6c, 0x12, 0xb, 0x9, 0x30, 0xc, 0x36, 0xc, 0x36, 0x6, 0x5, 0x3, 0x6, 0x24, 0x4, 0x60, 0x48, 0x6, 0x6, 0x18, 0x0, 0x66, 0x2, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x3, 0x2, 0xff01, 0x200, 0x2, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x80, 0x0, 0x4, 0x2, 0xfffe, 0x800, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x24, 0x60, 0x2, 0x6c, 0x3, 0x1, 0x12, 0x5, 0x6, 0x48, 0x5, 0x2, 0x18, 0x6, 0x24, 0x1, 0x36, 0x6, 0xb, 0x62, 0x48, 0xb, 0xb, 0x6c, 0x36]}]}, @NL80211_BAND_2GHZ={0xf0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa8be, 0x7fff, 0x8, 0x5, 0xfffe, 0x625, 0x1061, 0x400]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x3, 0x9, 0x6c, 0x60, 0x60, 0x1, 0x60, 0x12, 0x1b, 0x48, 0x30, 0x3, 0x48, 0x0, 0x4, 0x5, 0x9, 0x6, 0x53, 0x16, 0xc, 0x4, 0x6c, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xffff, 0x752a, 0x3ff, 0xe673, 0x7, 0x3, 0x7ff]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x1}, {0x7, 0x9}, {0x4, 0x6}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0x2}, {0x1, 0x9}, {0x7}, {0x1, 0x5}, {}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0xa}, {0x5, 0x6}, {0x7, 0x8}, {0x7}, {0x0, 0x3}, {0x7, 0x2}, {0x5, 0x9}, {0x0, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x5, 0xa}, {0x3, 0x2}, {0x1}, {0x2, 0x4}, {0x1, 0x7}, {0x7, 0x3}, {0x1, 0xa}, {0x7, 0x2}, {0x2}, {}, {0x5, 0xa}, {0x1}, {0x6, 0x7}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x9}, {0x6, 0x8}, {0x5, 0x2}, {0x6, 0x8}, {0x4, 0x3}, {0x6, 0x3}, {0x5, 0x2}, {0x2, 0x5}, {0x1, 0x7}, {0x4, 0x6}, {0x3, 0x9}, {0x4, 0xa}, {0x7, 0x5}, {0x5, 0xa}, {0x5, 0x7}, {0x1, 0x6}, {0x2, 0x9}, {0x0, 0x5}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x15, 0xb, 0x3, 0x1, 0x6, 0x30, 0x36, 0xb, 0x6, 0x3, 0x1, 0x16, 0x48, 0x3b, 0x6c, 0xb, 0x0, 0x30, 0x6c, 0x30, 0x5, 0x3, 0xb, 0x12, 0x9, 0x36, 0x24, 0x18, 0x1b, 0x48, 0x1b, 0x16]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x60, 0xb, 0x5, 0x0, 0x46, 0xb, 0x18, 0x30, 0x6c, 0x5, 0x30, 0x2c, 0x6c, 0x9]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x78, 0x0, 0x3, 0xb, 0x1, 0x1, 0x60, 0x4, 0x1, 0x12, 0x28, 0x5, 0x6, 0x18, 0x48, 0x2, 0x48]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x9}, {0x3, 0x5}, {0x6, 0x8}, {0x4, 0x4}, {0x0, 0x8}, {0x4, 0x3}, {0x4, 0xa}, {0x6, 0x3}, {0x2}, {0x1}, {0x1, 0x8}, {0x7, 0x6}, {0x5, 0x8}, {0x5, 0x9}, {0x7, 0xa}, {0x1}, {0x4, 0x8}, {0x3, 0x5}, {0x4, 0x1}, {0x0, 0x4}]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1f, 0x401, 0x4, 0x6, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x5}, {0x3, 0xa}, {0x2, 0x8}, {0x4, 0x4}, {0x6, 0x9}, {0x6, 0x3}, {0x6, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x75}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x19}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x850}, 0x1, 0x0, 0x0, 0x800}, 0x48034) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f0000000000)="cbfd32dcf75a5b94b9deac14852fa2895316f347214c686cbad2788260a7e19210ee6ce4fa83a9b44a9b27b2", 0x2c, 0x4800, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) 08:40:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f0000000480)) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000100)={0x0, 0x4, 0xc}) open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r1, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) 08:40:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) 08:40:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000740)='security.evm\x00', &(0x7f0000000780), 0x1, 0x0) 08:40:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000005c0)) 08:40:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r1, 0x400, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', r1) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:28 executing program 0: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='notify_on_release\x00', 0x2, 0x0) 08:40:29 executing program 2: io_setup(0x1f, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000001180)=[0x0]) 08:40:29 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:40:29 executing program 0: io_setup(0xff, &(0x7f0000002280)) io_setup(0x8587, &(0x7f0000000ac0)=0x0) io_cancel(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_destroy(r0) 08:40:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 08:40:29 executing program 1: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 08:40:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000740)='security.evm\x00', 0x0, 0x0, 0x0) 08:40:29 executing program 3: setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) 08:40:29 executing program 2: r0 = openat$autofs(0xffffff9c, &(0x7f0000000980)='/dev/autofs\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) 08:40:29 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 08:40:29 executing program 0: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.capability\x00', 0x0, 0x0, 0x0) 08:40:29 executing program 3: pselect6(0x40, &(0x7f0000000000)={0x5320}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0xff5]}, 0x8}) 08:40:29 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000004680)='ns/ipc\x00') 08:40:29 executing program 2: openat$autofs(0xffffff9c, &(0x7f0000000980)='/dev/autofs\x00', 0x0, 0x0) 08:40:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000fddbdf250100000008000200020000009af2f4233ad0ba9ed9f13655ae566736432922d5c3786afe3955e197a504c91011709e8458154d41d4d4c3ef168b5abbf8ce6aacc0762aa0b1db6e56f1b5fe1f9af4e726d66d8672659397bd0d658f"], 0x1c}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00', r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0xffffffffffffff7e, &(0x7f0000000180)={0x0}}, 0x0) bind(r6, &(0x7f0000007b40)=@vsock={0x28, 0x0, 0x2710}, 0x80) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x73) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="8100000000000000280012000900010076657468"], 0x48}}, 0x0) r8 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x300f828, [], [{}, {0x801, 0x0, 0x80000001}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000007d40)={'syztnl2\x00', &(0x7f0000007cc0)={'syztnl0\x00', r7, 0x29, 0x0, 0x9, 0x8, 0x62, @mcast1, @remote, 0x7800, 0x10, 0xcc, 0x4}}) sendmsg$nl_route(r4, &(0x7f0000007e40)={&(0x7f0000007bc0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000007e00)={&(0x7f0000007d80)=@newlink={0x60, 0x10, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc692}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_MAP={0x20, 0xe, {0x8, 0x396, 0x2, 0x91ee, 0x1, 0x26}}, @IFLA_NET_NS_FD={0x8, 0x1c, r8}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007ed8d5fa4a20500c50900000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 08:40:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x8) 08:40:29 executing program 2: pipe2(&(0x7f00000005c0)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 08:40:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) 08:40:29 executing program 3: pselect6(0x40, &(0x7f0000000000)={0x5320}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0xff5]}, 0x8}) [ 922.538991][T18695] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:29 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x40000003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400fc63a2985001000000c19e0e1879d632911f7c", 0x39}], 0x1) 08:40:29 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000004680)='ns/user\x00') r1 = socket$alg(0x26, 0x5, 0x0) dup3(r0, r1, 0x0) 08:40:29 executing program 4: openat$autofs(0xffffff9c, &(0x7f0000001080)='/dev/autofs\x00', 0x20100, 0x0) 08:40:29 executing program 2: clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0xffffff81) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r1, 0x0, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 08:40:29 executing program 3: poll(0x0, 0x0, 0xe5) clone(0x2000411cf7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x3, 0x6) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) [ 922.674939][T18719] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:29 executing program 4: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='uid_map\x00') write$binfmt_misc(r1, 0x0, 0x40) prlimit64(0x0, 0x0, &(0x7f0000000180)={0x0, 0x100}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 08:40:29 executing program 0: clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000027c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000847000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 08:40:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file1\x00', 0x1) 08:40:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r2 = accept(r0, &(0x7f0000000040)=@l2tp={0x2, 0x0, @private}, &(0x7f00000000c0)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000300000030000180160001006574683a7665746831ecfce0ac1c5936adec44820ce9fb972e5f746f5f626f6e"], 0x44}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_mount_image$qnx4(&(0x7f0000000640)='qnx4\x00', &(0x7f0000000680)='./file0\x00', 0x5, 0x6, &(0x7f0000000a40)=[{&(0x7f00000006c0)="08706ac65e44dc73e627fe8f380004ffc4df5f433f53403863fc5dcdfdd5a2314b87d4b97088667986dd3ea5d604119475d7880e2316964104a318224790a6d2582b488438c90cf55aa5e9bdf9a8d41d9769d9d6d45263eedc4e602026c6dd633bb61a183476b356cf33eda8c2c73548cd0700203a60b7d55b3da6b8405fded2a1f4ab7e18797819afd12aa7cbbb08d3724a620818bfe004", 0x98, 0xfffffffffffffffa}, {&(0x7f0000000780)="9760a7edbfb04341ff9d47d1e191c1987d4275e9006dc81e13c72db030ab955beef6c1456efa2eb6", 0x28, 0x9}, {&(0x7f00000007c0)="a4e41a8d0082594b06a47321e8e44c10b6114023c219a9fc286769a5f8b214c7fc0ea952d57a0acf5e06bd5fab206d213c7b2f7cab6ed57099fcd3e20083ae184d239247b1de324bc70cf48542a877b9bd42a5f70a376f11ef784fcc06578dfc89dcd3d8015dde66f8c5ecc08ca6951c8f402ce1bec9db4b51a2deaf69b519bde906c8c74aecacd2dc5c84c61c702c363fbe64b86ae6b74a58d6e835d07ac65072b142a44673b3c9ed19ac90ca14538252d26df1b43936c30a85fb30e0c3d0", 0xbf, 0xd051}, {&(0x7f0000000880)="1dee4d05db311e1aa85c4bb17f0298fa438ad22a1648fcecb35d3252638d13d4cb19e54845d8a3062eb0b8344b190282eb8cc9e5e9e292c5b3a9432ddc1db7adf935afa9cb39428f2fe9b08045dd78f308b8eeaa7e24e6f0c406748f4fc0442d38659ee1d7847024c9eebda9233579e239909fd37118487ae7866061090cc9e14f7af6fa71b43938fed11005356b0870ab", 0x91, 0x20}, {&(0x7f0000000940)="e35f4f91800255bf72499a52c115adddf9c7c6545a61e99c05606b55a46411bde9abed12eafcc16f39e7d2b1c659708f258ec91fb9035b14ff1c742cfa1f1da7f8be27f0ae5533b532a61df89cfa86fb15ceda2c4fca585267ce26e8f82a5b7c15cacf78c7ae9d1d787069a21a5d7d1275565f8712017bdbe8f5daf8c987f47e319d146ddee75b63b098087983b207cb92a906b95c46c174dcad7d8ea5ab074f", 0xa0, 0x8}, {&(0x7f0000000a00)="a4cd29c3bc84867032c1bda5f6cc88d7a0016ab29eac8df137026f614ad4aa550a037232a6bc4797b1", 0x29, 0x4}], 0x100000a, &(0x7f0000000b00)={[{'('}, {}, {'mptcp_pm\x00'}, {'TIPCv2\x00'}, {'TIPCv2\x00'}, {}, {'{:-$/\'!@'}, {'broadcast-link\x00'}, {'syz0\x00'}], [{@smackfsroot={'smackfsroot', 0x3d, 'broadcast-link\x00'}}]}) syz_open_dev$midi(&(0x7f0000000b80)='/dev/midi#\x00', 0x7, 0x3) r5 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/dlm-control\x00', 0x4000, 0x0) r7 = accept$unix(r2, &(0x7f0000000c00)=@abs, &(0x7f0000000c80)=0x6e) r8 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r8, 0x400, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/ptmx\x00', 0x34400, 0x0) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000020c0)="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", 0x1005}, {&(0x7f0000000440)="d01f7c20a9bb8dcfd5986f4d48801c58babc792fc705773963710d64a0fa825a9036c6bc5d73503caba1f7526b50cb20b256b56b85394709e19235e75fcbb524742a1b5aa4b4531f9881ba9702ee1a98f63c055b14451eba05df0c8ba6a8869395132ff83388301397ac0c4a346346512250f2d52c3ee162bad3aba0dfcec73cccea64e6ee40b4496803d64a443e1c1d", 0x90}, {&(0x7f0000000500)="33bcf475ba3077cb45f1539752e2b1a8fb8351b3d9065edcd8fee01076d3284c7a1347f2a3ae1f0c292c546049d677ddc4919e3e685639c0cc743f21e4776836cf5c96dda6baf7a5e7e1277b34e362143a945b2cb810a1fa6c0b4d2971a5f1c0a37d0f82937c70dc3afa14b0bee1baa25b3438ad5e9ce35bbf853623eb25d5d4530e4b9bf8da6f495b0de0037370804277c8acaee738e628a680ea3feb912f8753710322ba58be3923937db3488dc94b9cc437a8deb669e6b005f60a2cdc1656d747388f25f1649d8385080386351ad9e1e65bd9e889fa35f83a8aa74748af", 0xdf}], 0x3, &(0x7f0000000d00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r6, r7]}}, @rights={{0x2c, 0x1, 0x1, [r3, r3, r8, r9, r10, r2, r2]}}], 0x68, 0x4}, 0x10004010) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="1801000062f0d951e5184eaa4662153c6d062ddd8569fa6d1549e1a000952b6bec7d88d04a5063aa5b57d22d1c917b92587ed010e0fa32abd72d8cbbaa5f50a0f09922581eeadeaef85ae7b356dd73e549eb8fc052824de2cb427d5e34b2b307e2801232ab3c1cd9fdb16bd00b37849f864d2a6a742d43a788b3e8451423078eb635a26cbd3102cc04052c0d938accb129c2bc7fac30cc7e2d4912df053bb54f6b4c71b79ec923db98d3f2c679b267ce1b0962fda676cae1a874380bf6a42c52c888e148b6c45a9862eb198bdc9f00dde5788eb7f7c196e637ce89b386a2e800ca87eba4edbb84ca86cb6200", @ANYRES16=r4, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x40094}, 0x4000804) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000bb6f987692154500", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600"/46], 0x34}}, 0x0) 08:40:29 executing program 0: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='sysfs\x00', 0x9, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./bus\x00') preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180), 0x0) 08:40:30 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x40104593, &(0x7f0000000100)=""/184) 08:40:30 executing program 4: syz_io_uring_setup(0x7b23, &(0x7f0000000040)={0x0, 0x0, 0x23}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) [ 922.941161][T18755] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 922.968016][T18755] tipc: Enabling of bearer rejected, illegal name [ 923.016225][T18763] loop5: detected capacity change from 0 to 16383 [ 923.019641][T18720] validate_nla: 1 callbacks suppressed [ 923.019653][T18720] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 923.070804][T18763] qnx4: no qnx4 filesystem (no root dir). [ 923.090127][T18755] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 923.136088][T18755] tipc: Enabling of bearer rejected, illegal name 08:40:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x13, 0x1}, 0x4c}}, 0x0) 08:40:30 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:40:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r0, 0x1f, 0x0, 0x0, 0x0) 08:40:30 executing program 2: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x16172, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6800) 08:40:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0xc01047d0, &(0x7f0000000100)=""/184) 08:40:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffff7e, &(0x7f0000000180)={0x0}}, 0x0) bind(r5, &(0x7f0000007b40)=@vsock={0x28, 0x0, 0x2710}, 0x80) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x73) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="8100000000000000280012000900010076657468"], 0x48}}, 0x0) r7 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x300f828, [], [{}, {0x801, 0x0, 0x80000001}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000007d40)={'syztnl2\x00', &(0x7f0000007cc0)={'syztnl0\x00', r6, 0x29, 0x0, 0x9, 0x8, 0x62, @mcast1, @remote, 0x7800, 0x10, 0xcc, 0x4}}) sendmsg$nl_route(r3, &(0x7f0000007e40)={&(0x7f0000007bc0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000007e00)={&(0x7f0000007d80)=@newlink={0x60, 0x10, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc692}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_MAP={0x20, 0xe, {0x8, 0x396, 0x2, 0x91ee, 0x1, 0x26}}, @IFLA_NET_NS_FD={0x8, 0x1c, r7}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007ed8d5fa4a20500c50900000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000000c00)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c40)={0x234, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000010}, 0x8041) 08:40:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x5, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRES16], 0x2c}}, 0x0) 08:40:30 executing program 3: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x5, 0x0, 0x0) [ 923.363359][T18796] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:30 executing program 4: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x7fffdf003000, 0x0, 0x16172, 0xffffffffffffffff, 0x0) 08:40:30 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x17, 0x0, 0x0}) [ 923.435297][T18799] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 08:40:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H'], 0x25c}}, 0x0) 08:40:30 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) write$P9_RREADDIR(r0, 0x0, 0x0) 08:40:30 executing program 4: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x5, 0x4401) 08:40:30 executing program 3: syz_io_uring_setup(0x40674a, &(0x7f0000000100), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:40:30 executing program 0: r0 = epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) [ 923.517220][T18802] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f00000002c0)) fcntl$setlease(r2, 0x400, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1, @ANYRESHEX=r0, @ANYBLOB="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"], 0x34}}, 0x0) 08:40:30 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg2\x00', 0x4) 08:40:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x0, {}, {}, @rumble}) 08:40:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 08:40:30 executing program 1: syz_mount_image$tmpfs(&(0x7f0000002900)='tmpfs\x00', &(0x7f0000002940)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002a40)={[], [{@dont_measure='dont_measure'}]}) 08:40:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040), 0x4) 08:40:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x300}, 0x0) 08:40:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x40) 08:40:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x68}}, 0x4040081) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000008021fbf34b5f7bfe2c4de2236d0253bf55e68a15813e22c7697e545e9f798e069a369ac5c6e66381ccc6da1eca906dfd9804359fcc1493918a45896db30b29a85d24d196998da4720c05f761811fcc376453d7cc3b0ce6ca930300000000000000d83396546b05a8eec480460fa6b849", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600"/46], 0x34}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x408000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280)='ethtool\x00', r2) [ 923.741312][T18846] tmpfs: Unknown parameter 'dont_measure' [ 923.769486][T18846] tmpfs: Unknown parameter 'dont_measure' 08:40:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0xc0045878, 0x0) 08:40:30 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x5451, 0x0) 08:40:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000400)=' ', 0x1}, {&(0x7f0000000480)='#', 0x1}], 0x3}}], 0x1, 0x0) 08:40:30 executing program 4: openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x64880, 0x0) 08:40:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x111a}, 0x40) 08:40:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0xffffffeb, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x48d6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x405}, 0x4004080) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x6, 0x4, 0xffffffff) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffff7e, &(0x7f0000000180)={0x0}}, 0x0) bind(r5, &(0x7f0000007b40)=@vsock={0x28, 0x0, 0x2710}, 0x80) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x73) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="8100000000000000280012000900010076657468"], 0x48}}, 0x0) r7 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x300f828, [], [{}, {0x801, 0x0, 0x80000001}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000007d40)={'syztnl2\x00', &(0x7f0000007cc0)={'syztnl0\x00', r6, 0x29, 0x0, 0x9, 0x8, 0x62, @mcast1, @remote, 0x7800, 0x10, 0xcc, 0x4}}) sendmsg$nl_route(r3, &(0x7f0000007e40)={&(0x7f0000007bc0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000007e00)={&(0x7f0000007d80)=@newlink={0x60, 0x10, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc692}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_MAP={0x20, 0xe, {0x8, 0x396, 0x2, 0x91ee, 0x1, 0x26}}, @IFLA_NET_NS_FD={0x8, 0x1c, r7}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007ed8d5fa4a20500c50900000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd27}, 0x14}}, 0x0) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x115100, 0x0) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000000006a09985035c6c6de78e4de76219f26ac1bb8596493458aa3eb0f512ebdf1ae42f57a38e8b8992e9888c646280f1ba75258b27e9fe32b9d1838d5647c14d8f248f615cfc04c8916d839877408369fbd7df07583000000000000000000", @ANYRES16=0x0, @ANYBLOB="000128bd7000ffdbdf25010000001400020077673200"/34], 0x28}, 0x1, 0x0, 0x0, 0xf4}, 0x0) 08:40:30 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) 08:40:30 executing program 3: get_robust_list(0x0, 0x0, &(0x7f0000001380)) 08:40:30 executing program 1: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 08:40:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x1158, 0x13, 0x1, 0x70bd2a, 0x25dfdbfe, {0x22, 0x0, 0x85, 0xff, {0x4e20, 0x4e24, [0xc6, 0x8, 0x81, 0x2], [0x0, 0x0, 0x8, 0xfffffbff], 0x0, [0x7, 0x9]}, 0x6, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "36ddb5738635453a70e573baa5e460fbc73c1fc56fe917a801407c28dc1f64ea905c74258baf6bd3"}, @INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "e1b3dea119adaf8a754a4185b1b0e110b6dd5a750e29b3cbb2b11f2b4040a80c4edbab6b20d6b691207dc4b30e8eb3337bf4ca39e042d9bb51d13e4c036dc51bc5ce3b31976120d71b985bedee4b6525748cfadde5f7cfc215182f1ed3ed1f1ca054c33d84a9e0a7fabb6b3a5331d6ce174535ee7f68321a473cf12b174bf0d6fbd1e86e68a34b6735da1303495ad5d7af30d151ae6bdc33e7f9a261e03078d5d00e3060399e2f05a37498aead7a7cee1cc56b21a7ca1c6ae114d8bcc77a5bede8b0a14da110e13890362bfaae806c69d56162fdfaabfc96a1cf09"}, @INET_DIAG_REQ_BYTECODE={0xffc, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x1158}, 0x1, 0x0, 0x0, 0x40050}, 0x20004000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000013c0)={@private, @multicast2}, &(0x7f0000001400)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() syz_open_procfs$namespace(r1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) stat(0x0, 0x0) pipe2(0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) getpid() 08:40:31 executing program 4: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x65) 08:40:31 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891d, &(0x7f0000000040)={'batadv_slave_1\x00'}) [ 924.030657][T18880] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:31 executing program 3: setreuid(0x0, 0x0) setreuid(0xee00, 0xffffffffffffffff) 08:40:31 executing program 1: process_vm_writev(0x0, &(0x7f0000003cc0)=[{&(0x7f0000001040)=""/4103, 0xfffffffffffffe64}], 0x1, &(0x7f00000051c0)=[{&(0x7f0000003e80)=""/4079, 0xff3}], 0x1, 0x0) 08:40:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000400)=' ', 0x1}, {&(0x7f0000000480)='#', 0x1}], 0x3}}, {{&(0x7f0000000900)=@ax25={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x228}}], 0x2, 0x0) 08:40:31 executing program 0: syz_io_uring_setup(0x4c53, &(0x7f0000000000)={0x0, 0x95fa}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:40:31 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000001080)=0xffffffff, 0x4) 08:40:31 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r1, 0x400, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0xffffffffffffff77, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}}, 0x0) 08:40:31 executing program 3: r0 = syz_io_uring_setup(0x5558, &(0x7f0000000140), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 08:40:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000008300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 08:40:31 executing program 1: r0 = epoll_create1(0x0) r1 = gettid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, r2, &(0x7f0000000000)={r0}) 08:40:31 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x906c2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x401) getpid() r1 = dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrusage(0x1, &(0x7f0000000400)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x4240a2a0) dup3(0xffffffffffffffff, r1, 0x80000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffbfffffffe7]}, 0x8) ioctl$KDGKBMODE(r2, 0x4b63, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$FITRIM(r3, 0x40047211, &(0x7f0000000100)={0x0, 0x0, 0x2b4c}) 08:40:31 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 08:40:31 executing program 0: syz_mount_image$fuse(&(0x7f00000038c0)='fuse\x00', &(0x7f0000006200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000006240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}}) 08:40:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x8c, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x60008850) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffff7e, &(0x7f0000000180)={0x0}}, 0x0) bind(r5, &(0x7f0000007b40)=@vsock={0x28, 0x0, 0x2710}, 0x80) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x73) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="8100000000000000280012000900010076657468"], 0x48}}, 0x0) r7 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x300f828, [], [{}, {0x801, 0x0, 0x80000001}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000007d40)={'syztnl2\x00', &(0x7f0000007cc0)={'syztnl0\x00', r6, 0x29, 0x0, 0x9, 0x8, 0x62, @mcast1, @remote, 0x7800, 0x10, 0xcc, 0x4}}) sendmsg$nl_route(r3, &(0x7f0000007e40)={&(0x7f0000007bc0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000007e00)={&(0x7f0000007d80)=@newlink={0x60, 0x10, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc692}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_MAP={0x20, 0xe, {0x8, 0x396, 0x2, 0x91ee, 0x1, 0x26}}, @IFLA_NET_NS_FD={0x8, 0x1c, r7}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007ed8d5fa4a20500c50900000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 08:40:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) 08:40:31 executing program 1: syz_io_uring_setup(0x1eb4, &(0x7f0000000180)={0x0, 0x0, 0x15}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 08:40:31 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00'}) [ 924.443503][T18942] fuse: Bad value for 'fd' 08:40:31 executing program 3: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0xc62f98480d383858}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f00000000c0)={0x0, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000200)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb], 0x2}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:40:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) [ 924.478470][T18942] fuse: Bad value for 'fd' 08:40:31 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x40031, 0xffffffffffffffff, 0x8000000) 08:40:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000007240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x2b}, 0x60}], 0x1, 0x0, &(0x7f0000007480)) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000a140)={0x0, 0x0, &(0x7f000000a100)={&(0x7f0000009d40)={0x3a4, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) 08:40:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x40284504, 0x0) 08:40:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) 08:40:31 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000064c0)='/dev/full\x00', 0x80000, 0x0) connect$l2tp(r0, &(0x7f0000006500)={0x2, 0x0, @remote, 0x2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00i;\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600"/46], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x404c010) 08:40:31 executing program 0: socketpair(0x2, 0x3, 0x6, &(0x7f0000000380)) 08:40:31 executing program 3: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0xc62f98480d383858}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f00000000c0)={0x0, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000200)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb], 0x2}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:40:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) 08:40:31 executing program 4: syz_io_uring_setup(0xa59, &(0x7f00000000c0), &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 08:40:31 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000001080), 0x4) 08:40:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x5421, &(0x7f0000000100)=""/184) 08:40:31 executing program 3: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0xc62f98480d383858}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f00000000c0)={0x0, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000200)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb], 0x2}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:40:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) [ 924.931089][ T3244] ieee802154 phy0 wpan0: encryption failed: -22 [ 924.937407][ T3244] ieee802154 phy1 wpan1: encryption failed: -22 08:40:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040), 0x4) 08:40:32 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f000000c780)=[{{&(0x7f0000001640)=@un=@abs, 0x80, &(0x7f0000001880)=[{&(0x7f00000016c0)="d4", 0x1}, {&(0x7f0000001740)="d9", 0x1}], 0x2}}], 0x1, 0x8004) 08:40:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000a140)={0x0, 0x0, &(0x7f000000a100)={&(0x7f0000009d40)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 08:40:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/184) 08:40:32 executing program 3: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0xc62f98480d383858}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f00000000c0)={0x0, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000200)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb], 0x2}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:40:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40840) 08:40:32 executing program 4: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000040), &(0x7f0000000080), 0x0) 08:40:32 executing program 0: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[{0xfffffffffffffffd}], 0x0, 0x0) 08:40:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f000000c780)=[{{&(0x7f0000001640)=@un=@abs, 0x80, &(0x7f0000001880)=[{&(0x7f00000016c0)="d4c1", 0x2}], 0x1}}], 0x1, 0x0) 08:40:32 executing program 1: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x80000400) 08:40:32 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4f2c3d4ad03e5095}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001200), &(0x7f0000000140)) 08:40:32 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f000000c780)=[{{&(0x7f0000001640)=@un=@abs, 0x80, &(0x7f0000001880)=[{&(0x7f00000016c0)="d4c13f85", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 08:40:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13}, 0x40) 08:40:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0xc62f98480d383858}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000044000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000200)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:40:32 executing program 1: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x16172, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x340, &(0x7f0000000000)={0x0, 0x3397, 0x8, 0x0, 0x3c1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:40:32 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0xc01047d0, 0x0) 08:40:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="d49ba062", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600"/46], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007ed8d5fa4a20500c50900000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffff7e, &(0x7f0000000180)={0x0}}, 0x0) bind(r5, &(0x7f0000007b40)=@vsock={0x28, 0x0, 0x2710}, 0x80) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x73) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="8100000000000000280012000900010076657468"], 0x48}}, 0x0) r7 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000002a250000d68a000028f800030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000058950000000000000001080000000000000100008000"/192]) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000007d40)={'syztnl2\x00', &(0x7f0000007cc0)={'syztnl0\x00', r6, 0x29, 0x0, 0x9, 0x8, 0x62, @mcast1, @remote, 0x7800, 0x10, 0xcc, 0x4}}) sendmsg$nl_route(r3, &(0x7f0000007e40)={&(0x7f0000007bc0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000007e00)={&(0x7f0000007d80)=@newlink={0x60, 0x10, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc692}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_MAP={0x20, 0xe, {0x8, 0x396, 0x2, 0x91ee, 0x1, 0x26}}, @IFLA_NET_NS_FD={0x8, 0x1c, r7}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007ed8d5fa4a20500c50900000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0xc0, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x3f}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x8) 08:40:32 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000006c0)={[{@block={'block'}}]}) 08:40:32 executing program 2: bpf$MAP_CREATE(0x11, &(0x7f0000000000), 0x40) 08:40:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x9, 0x401, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) 08:40:32 executing program 3: bind$xdp(0xffffffffffffffff, 0x0, 0x0) [ 925.579379][T19065] __nla_validate_parse: 5 callbacks suppressed [ 925.579394][T19065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 08:40:32 executing program 0: move_pages(0x0, 0x2, &(0x7f00000001c0)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil], 0x0, &(0x7f0000000200), 0x0) 08:40:32 executing program 2: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = io_uring_setup(0x4e2f, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x1, 0x111}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r1], 0x1) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) 08:40:32 executing program 1: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xbfa5b220bb1ee474, 0xffffffffffffffff, 0x0) 08:40:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x1000, 0x4) [ 925.739549][T19071] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:32 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) io_uring_setup(0x7691, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 08:40:32 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 08:40:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0008fcf6", @ANYRES16=r1, @ANYBLOB="0000000020e9000084266588030000000000"], 0x18}}, 0x0) 08:40:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x5450, 0x0) 08:40:32 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000003900)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private2, 0x1ff}, 0x80, 0x0}}], 0x1, 0x0) 08:40:32 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x1e37, &(0x7f0000000000)={0x0, 0xf3ee}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 08:40:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f000000c780)=[{{&(0x7f0000001640)=@un=@abs, 0x80, &(0x7f0000001880)=[{&(0x7f00000016c0)="d4", 0x1}, {0x0}, {&(0x7f00000017c0)="84", 0x1}], 0x3}}], 0x1, 0x8004) 08:40:33 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f00000063c0)={0x0, 0x0, &(0x7f0000006340)=[{&(0x7f0000000000)={0x10}, 0x10}, {&(0x7f0000000100)={0x10}, 0x10}], 0x2}, 0x0) 08:40:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4(r0, &(0x7f0000000040)={[0x200]}, 0x8, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', r1) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:33 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f000000c780)=[{{&(0x7f0000001640)=@un=@abs, 0x80, &(0x7f0000001880)=[{&(0x7f00000016c0)="d4", 0x1}, {&(0x7f0000001740)="d9", 0x1}, {&(0x7f00000017c0)="84", 0x1}], 0x3}}], 0x1, 0x0) 08:40:33 executing program 3: semget(0x0, 0xa5b8636fe44b10d9, 0x0) 08:40:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 08:40:33 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x20042) 08:40:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x6, 0x0, [{}, {0x0, 0x2}]}}) 08:40:33 executing program 3: setresgid(0xee00, 0xee01, 0xee00) 08:40:33 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 08:40:33 executing program 2: bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) 08:40:33 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f000000c780)=[{{&(0x7f0000001640)=@un=@abs, 0x80, &(0x7f0000001880)=[{0x0}, {&(0x7f0000001740)="d9", 0x1}, {&(0x7f00000017c0)="84", 0x1}], 0x3}}], 0x1, 0x0) 08:40:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f000000c780)=[{{&(0x7f0000001640)=@un=@abs, 0x80, 0x0}}], 0x1, 0x0) 08:40:33 executing program 3: socketpair(0x0, 0x180000, 0x0, 0x0) 08:40:33 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000500)=[{0x0, 0x0, 0x6cd3}], 0x0, &(0x7f00000005c0)) 08:40:33 executing program 1: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x16172, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x340, &(0x7f0000000000)={0x0, 0x3397, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:40:33 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000002400)={0x24, 0x14, 0x401, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "2f612154312354e0cb"}]}, 0x24}}, 0x0) 08:40:33 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x3, 0xffffffffffffffff}) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[], 0x16) unshare(0x40600) mkdir(0x0, 0x0) ftruncate(r1, 0x0) fchmod(r1, 0x0) 08:40:33 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x4600, 0x0) 08:40:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8844}, 0xc000) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x98, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x84, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x119bfd86}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fd66a9e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x200bc78d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dd2c8a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb800}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x386f}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fde3d76}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ece1276}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a8f64a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe27d5ee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b7415df}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e31faa9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72b582de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f61ddb9}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8800}, 0x4000420) [ 926.435978][T19161] loop2: detected capacity change from 0 to 108 08:40:33 executing program 0: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x5000, 0x4, 0x16172, 0xffffffffffffffff, 0x0) 08:40:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000400)=' ', 0x1}, {&(0x7f0000000480)='#', 0x1}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x228}}], 0x2, 0x0) [ 926.499227][T19161] isofs_fill_super: bread failed, dev=loop2, iso_blknum=27, block=54 08:40:33 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/zoneinfo\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x8000000) 08:40:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 08:40:33 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x3, 0xffffffffffffffff}) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[], 0x16) unshare(0x40600) mkdir(0x0, 0x0) ftruncate(r1, 0x0) fchmod(r1, 0x0) 08:40:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) [ 926.613080][T19161] loop2: detected capacity change from 0 to 108 [ 926.648683][T19161] isofs_fill_super: bread failed, dev=loop2, iso_blknum=27, block=54 08:40:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x3, 0xffffffffffffffff}) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[], 0x16) unshare(0x40600) mkdir(0x0, 0x0) ftruncate(r1, 0x0) 08:40:33 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f000000c780)=[{{&(0x7f0000001640)=@un=@abs, 0x80, &(0x7f0000001880)=[{&(0x7f00000016c0)="d4c1", 0x2}, {0x0}, {&(0x7f00000017c0)="84", 0x1}], 0x3}}], 0x1, 0x8004) 08:40:33 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x5}, {0xa0a}]}) 08:40:33 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80c45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x64c8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:40:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x81) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x40000) 08:40:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000240)=0x9fc, 0x4) 08:40:33 executing program 0: shmget$private(0x0, 0x3000, 0x2eb676116591eda9, &(0x7f0000ffd000/0x3000)=nil) 08:40:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000700)=[{{&(0x7f00000000c0)=@generic={0x0, "86b3980259440a01662cd5d28b7b1596d41b104e0ca363d9e952a36734031c9dec6fc84dbff9350a118baa568f075c03b368734e0cc1420b273e81bf872b45ebcc222a4ecd628374409573e73de0e816dc665f8d4a152f858e0bc4a15790282db19e96d1cb823c91c655ecdb4f93d29b891fd85e6c79adc067ca57c8c362"}, 0x80, 0x0}}], 0x1, 0x0) 08:40:34 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0xc01047d0, 0x0) 08:40:34 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x3, 0xffffffffffffffff}) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[], 0x16) unshare(0x40600) mkdir(0x0, 0x0) ftruncate(r1, 0x0) fchmod(r1, 0x0) 08:40:34 executing program 0: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x401) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) getpid() r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrusage(0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x60}, {0xffffffffffffffff, 0x8020}, {r0}], 0x4, 0x0, 0x0, 0x0) r1 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$FITRIM(r1, 0x40047211, &(0x7f0000000100)={0x0, 0x0, 0x2b4c}) 08:40:34 executing program 3: getrusage(0xffffffffffffffff, &(0x7f0000002e40)) 08:40:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) 08:40:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x3, 0xffffffffffffffff}) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[], 0x16) unshare(0x40600) mkdir(0x0, 0x0) ftruncate(r1, 0x0) fchmod(r1, 0x0) 08:40:34 executing program 3: unshare(0x40600) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) flock(r0, 0x2) 08:40:34 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000001c0)=""/149) 08:40:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20044086) 08:40:34 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r1, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x3, 0xffffffffffffffff}) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[], 0x16) unshare(0x40600) mkdir(0x0, 0x0) ftruncate(r1, 0x0) fchmod(r1, 0x0) 08:40:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000014c0)='mptcp_pm\x00', r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x34}}, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r3, 0x400, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x110c, 0x37, 0x4, 0x70bd25, 0x25dfdbfc, {0x11}, [@typed={0xef, 0x91, 0x0, 0x0, @binary="0011c9b669ed2aa9a31c3c900b8a049f3b9894854ec83a06fffc6b78b7bb0ea562cb1ae204effe09c0b1169789e225c628541b42a186088226c9bbc6256d894c70e99a52cf041ad8ca4baf90ec67f5a90ce08fbe41be8f8c693887a94ac1c296d15531cd47a250573456380e7bbe94aaed7e41602ffe5f0d8cc5e3ff2601b37399706308a2ec459fb0e4d0a478727aab5ad592bda735a40e2e5017d56517f77b3139c27cb876005328dec30046ad61efbe6ab2e99d10636486d86aa38943aa78be36a6502776b80859a526f98531b279a3a7fd0fdba0124144fd162c0fe3588481e5ec576a2d50ffa76e9a"}, @generic="693e1e5dfd30b98681004acc6ded95829ba746d0b141c498582e7a0fac9a59e9f82d28f3cf438a4da0246d7bae9a6694b9f5efbf9221da37f0f8f5d3f9856da2575de9efe8dc4a906bc4963a234ac419c07b73d3a591e08cd179bf8974c8f0da8d0b156a9b65fb456be3018239702af943f1d73081707800ac8c8d5323a34eafc1a838e9e52f1e0ce831d378179ef8e01f85cb2d50d938a831d3d7b0e541f7c38f552ef0c74c95ab25dfa4ea4202003e440e8b587338fe08e757c1b7cd813705459864b0fd0a43bd7834ed905901a1f5217572081eabcec08b4285074d127fa6bc9bebe29fa08588b4ffa3732b6814ef3825b65a16fb1c1a8d376a1dcebc4f1d30a0911201eeeb857eb2b903a00b5c7335bbf5323301764299e19e74f3089c7539e9af5ce8ab783aa3d59a51f87da1bf646eca94887432fa382bc9778d6e6ee013976e0d74758839e771a44ae5a084ea25e753bb214484b53b60491da676592e1ea44a8b039dd2ba5418b2d50060c902a34375029445091781fbee8b87d8acc28dc840a06a8870746c24444962c90519c9a4ad28e7eef0cf237fbbb59ddec74cfc61275135d3ff0164f7f8443a32b2e05ee124330b9f17e15bb5cc0bdfeb0ee0cd03504ae800a1369091a1837a64528d3612e00700543e99f687b0ac2403ef203682a470682b3793a48a6986bac1abf00ac53dd8273e506958587715edd7c2e981f6ccecfe252a6c31639c811449ee88dfac5908135417ca487ef8666590cac7251e59059597874fad3c6ae21e6bc6d31c8a112514f1041e619d5acb04712049bd73496ba6cab83010643aacd012ef53cc6b019c5d731df7d3cfb6c90ff7cfed29444451ecdbca06b5852cb60a3bf8f5d66574fccdc7352be9ce275e6f5a4ac22fcc3745461f92a93cef779d26ee6d65b87c88d3c244c0616d62f73dced06c5d77b3939605327f5c94b9bade0062f788c86f35cce2165fd17a23816d0d2b0c3fec744bbf9906e482c45d38057c0ae452d2a533d1bb60004dc31de5c526c91313366ffbc5361f6126cbc900c74a1de30ea501aff449a0d468677b3b4ec8b1853a4538b60425bdea7649fd42b918ee1507f70d4f4024fd2d12c3f31a6a034c4e3321445d561256128fff360e52680785ec3c972778b0645812913244b8f49e12836f076db0c59a7ab81d041086341861586e73ce6067c2e446677b8208691f2f20f45e7e038a49f99baa8dd357d56b6b04a91e767752631d64e854fa1fbfa7b131de85c15da74502d800832020db111aae30fa60c0b9791acad40567040b94ce81fd278afc484b7ea7d212acddde52ba9145cb6eb5da8ae7babcddd760545a91162c12fa386ab5d1b3e92df881cdd72db0836176e004a21e667eb3e9bfde28cd721b13469d5a2cd56d710767488f2ce2ddb7e397e3b427ef84a6867f9ea5126adf70cd53e5c849a1386060c076817a92e31c696cc1a43c9e462b150921a526cfe30b47573740c533bda3657695ce55d98546014b5eab50ef0817afe233555727bc6ee0088fa4e8f7fc9dfab9ff7a9f8f1c48ace094ef1604d311941afe5df601e24f3b5fcd85912f15a904fc965257a70fcd4e669158a113421aa3f338e79f33902203240b0fdab2cba15236198b857bcdbcefabd64fac6363755b4f2592fc5ad7227a65068a72a92b2f0eb23716fbe89bedffc3e7706543517789dcbbd5ad40e3d5891c5b90a5919d40e994e29c4d4f677ba10ec700a0e0ba82118b68dc17995d7dbaa7bdff964b5a55f5500fad4b8e86efa4e608e21b8d43cf69453518fb8a5a914b799c153483833e61657f009d9b324fa59a36fb271a1c5be1cecea18eba7e57682905c789bf63a3631b862c8979a1883e1913984113f7db892b9d5ee2690ff442c7827d0c77bbd117772d503965cdbe1dd5522f78515f77d94981b0ffdad455feb10552da8c4dd1534d32ec73fef9ef9e7b84cab3a3f309c46e00e3a18bc8532aa578e86a31137928f55c3f6d8c6f284a7bd56f67ed43fde50b2ab89d09ead529a07170c965816886e2833df355c94bf1dbcdc96fb911a6b1161b56451bdcf96b024e316901edde4ae0b22740b1ea024c016fbeae0979f13b08538a4d7e2eed3cfeb60d0379e13ea3326779f6c6ca57dd7a61361961205fbdfa5ca47ccc8bad79a02e5460c25f557c462388d38ccf2500005326fdee3f6015c1bad991b3c7454add04ebccdb034953639ba5cf3f3de0ce482ea8e5ef3e168c22f9aff9fc95b4cedc743f6eaf85fe42d1baca41bf21f28b267ca96c901e4251b51c40ba19d59a11039d9bd1b0b1bf3850cafc43e3f63ec1c05542f120b863db75f359bc56094147d6bb4afe7147587f593d55bc26d2ca9e8850c8d87348c25b5b4ab36629fa5030d91fbd67638a3eb6e485ca47b95197b5be9087759c76158284407a3fd6a404abbe615ef8856315a3486973fd54e92a5ffd5aef45ab1b90d282c8525bd0d4ed275810497079abcc275494d9051a3b1e98134d627167ef3d8dc8c463d3cee945bde405d4df45902e11f410578c17b98a7161109497b239e932381cd0c9b76259425b91f9b79a2e28f5f75d0728f92e685412dea4cc875d15d4bc40b33e2dbcf8878b48c5f43f4533679bd0453d7feb399bd7be8fccb17eef4378eab5559b516c6c283cb02cf0ce7fa7d0b6badbed687b3447fec4b5ed0b938d06f259b6c13b5e68c787df0155c31b7f61a27dd35dde485a5a6efd5df54cd1841db81fbfcb1a159120065d409344603989ac831933e718268209970fc7db6487389585a51c0f5048ba106a14c26eca63b571b37838c6427f2f891402ec8e2784a32b0affc6a814d0d8e5c521582444852fc235decaf91e68fcc87837b47790d7520d31e2f0ef64be098417c7f2cf751f1006b8b89c19da208aad748df0eb41452d4a56736811258dbf927a95849083cae4605c81b3baaf5ab2194003318b6a314981aa8657e66b670a1fe11dadc501473c35367a08849973e8c26226149f022ec3404c12c92d64d9c92b1e522c07fb366601be4224c1516dc04f399f6c50e44061a9486da333b3593933cb9fb9365ff629abc198f4a20aa796706dcf3f6b503e78109c796812ad24cf99ddace2f48fa23ee7f9dfe0bea63b0dc972ee5ed5951656ca679cefcef91bc31eda48c08713b45234d8699c5bd0109efd028acc26493f560f2d0982790e183b7987854a440d81c2f9e730d190469d20a1bd386a1b809fd0e2285ed81b29f888ba2fdcc2f22e755d1d54eb3487a4224e91f9b43e0852fa5f8b458f5da1c49981e9a6faf1068e8aaea148ab5d937122e8afd726b01563069236bb2d56a0e1076bfc8abaaefdb3bec52286c5c1757e7fb46d91490cea52c90ca00904634d427e79bca2a7b743b1f73e1bcc63cc549ec5ea5ec2d08b153a345237ca75a57e03acfeb906d4ce9546db9e68d2419c0b88c537ddff52fdcf0b1b37ddeaee54ed2996f05c64ad1473d2ec0ebe4e1b64a1ae85e25e668f2bd237078df43c95304c2ace78bef662bddd7d66cd10a554056a02401a88d3c85454141aa6abeb9aa4fbc398987dfe574ee8a5aae2d3e28be8cad4698738d67dd21bc92b39e2b8b34be62267a37de1517dca540a4c54fc5c46f141ac0220caf7b7267a660ae3c271fa85d05f33b9a5bc22086c086b13047d569f21f42296ec9288188b32b5b8a00e5371634907add0304bf49b92c8c71486267409decfe3333e313ed406ccf70577b425338803cc348419820a63cfc559a61e3e6dcd2cee4a9292f888df41958f3575f1e25e5865f347610fe01e94aeb97e3054d8b5c63ebc376038c68f5c49ee2928087293e519fbad18ff1647516d57f273ee6112585282784c17a1962c5ad01849c97b77b101b0929726089e084b36615682b9ea1db15d62b3a11ddf10157e4888b8c33c74e6288dffb34b3ec66844e03caea25a08054c3ec39f261ebb7e4d4a9e95efa30364e4b97161be071233c29872f1222f30166b3f2713e1abd4b3f1eb2b3f0d05cadc688a7ecbdbcc9be34c5ecccb966f5c354472e26b48c217991c86f764b75c6da91c36d7969a4d2b9de9719e9a0e84eac5e63a4bcb946b75f126eda1506d9199ffbff53160b4322321e33afe59478219fc80728c6b7c6aee1555b647e3d7efb6d2e83b99218237808940ecc8e614ca0d308ba45cc516725550db0f1e125c43b151f86b3414f78cb1e30eb09fa7872700766208986ac923e85a72bb40b66cdacffaf939bbfe0ee0b2f8be9c6de88f66d674d23ca8d15a5ad6d2c1dcdf5a2fb8a424862bf7fa7cbb48e3561b54107dfb197338265c0acf821bb05799cd664492b66cb361b2958b35dc0a9ab1ec4c1bd10269f30f8ba9694bfc4fc8f3e59dbf9aee2779281ca47aaebc7a08f6562e80288d9ea5bcde93e58178867ef15990632eed5b8d925b88162a96f9240451cbcd3f954427ee52a1c1d42fe3513458c001b202cb1664059fd6e1c0714e6cdee3fd6fb163f6771cabc6be15e592debfcfb97a3cbfb8a27bf874e87df292ac5568d7f985a3657054245338f02098945e2c2f1c78dd60d699f858de3a69d6018428f02b27e5902aaa091ac384b75ac3d5d32f8bf335fa7b8aa2ce99e9410091f9ae8399c8198d8c3244dd5075412d338e4f46e7cbc9bb344c88efef088f51f130b70ff5f7615ce663be89d905370d7f24c7a3631415215025735220ef73a2cb882f789de539e50079532cb790ad23e37b67c4ccd3b2fc8a369347719632b01f759f88dd4c4b892dca39838ac33bc391af1a6af40eb52ca47029d1abeabc67ba9ffceb6b343a9a503282a6d2a8e343c39a406ed1a37afe985010a8d408f17cc3257bf032c86e0a3d77e64bab95b15d79abece8c74c1aee7442f77861a261445fa9553e16b080329b0ec3bb8b819a798a100dc445a3a1da3d06ef717fd5d992372e6cb119e15e17aba22e64cdd060577852f1b98a2be7dac18a5e3b3de468f1591d1c56498873a887e7070cbdae3ef74774d09d3a6bb05526aeb57b5ddab62df61aa2195318576e18f962fb453fe39e6f038dfbc146f0cc91fa5a4b3bbc13e7ac26abeea4d9771db9bbee973a7b622ee381f5094797de73a1fe8834deb04f4990cb0ace9a40a5efa55c91ee1e44570f9079a4572c02d277812746f5cb6d1a5617a12d15846847dc89ae40aced5c41563520e48ea1d8e89b4ce6bdb783dc4295300fb612713a97898a41b95ca523d0e46161e515df59419726e2f19507259da8b4a82c147666f1d7cd072879f0e820529def0d842c713d138d2324ed5184a69ecb55de4c5a8aca902cdec7c3a162260debf82f1eb3e5f8c21c4b780f243f1fcc365c4f616bed215ff66d511c51237646b029d6979209401623805bef8ab041ea4db04cca23ddd121aa4a02ed6b7e724a8c2349be9131782e0710514135af16e52398f4b823a6d71b769b141ecff217d7bc7f5537e2d9d4f2a85c8a87807c7bf32891058ed261246ba6e5dbd8a91fde83d7df11f29a64fcd93c2d4c81f6ad95494048899a4f8d5eb9db40b01ffa027a997adf45902a99899801fd01609b60ff0cde64998173dbbde8159f1275483000251097d482e5243622c01e892bf2d8d4f05a00e9c3622ae36e6160657c5942e82e58ce1220222b939547f7d9d463ad4fdaf299da79b9660b8e450fcaf69535c869390bc4afefd48863e13d879ccb92deea3366e861e721ef353a039624a5d69d9878224416ad86dc96a1eee5b3bfb267d5f00668ec48123cdc24e63be670242acbfb5a74", @typed={0x8, 0x47, 0x0, 0x0, @uid}]}, 0x110c}}, 0x4000001) 08:40:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:40:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'veth1_virt_wifi\x00', {0x2, 0x0, @local}}) 08:40:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000640)='h', 0x1}, {&(0x7f0000000680)="9c", 0x1}], 0x3, &(0x7f0000000a80)=[{0x10}], 0x10}}], 0x1, 0x0) 08:40:35 executing program 4: ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000000)="e7") mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x16172, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x33c2, &(0x7f0000000040), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 08:40:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80008}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x7, 0x801}, 0x14}}, 0x0) 08:40:35 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8942, &(0x7f0000000040)={'batadv_slave_1\x00'}) 08:40:36 executing program 1: remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 08:40:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="ce85bf7ccbaa1a8a47f3ad850d80bbda", 0x10}], 0x1}}], 0x1, 0x0) 08:40:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x80a0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', r0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0xf8, 0x0, 0x8, 0x501, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xaf9}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7132}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x62a}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0xf8}}, 0x1050) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007ed8d5fa4a20500c50900000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)=@newneigh={0x48, 0x1c, 0x20, 0x70bd2b, 0x25dfdbfb, {0x1b, 0x0, 0x0, 0x0, 0x80, 0x4, 0x1}, [@NDA_SRC_VNI={0x8, 0xb, 0x20}, @NDA_SRC_VNI={0x8, 0xb, 0xfffffffa}, @NDA_MASTER={0x8, 0x9, 0x7}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_LLADDR={0xa, 0x2, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x47e6a8f44fd0210) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000ed7466c088a9352a218d19513b3cd951d05f0e9b583f5d5feb415ff4531b27e52c53efeca1ec2197092a441b0a05becd232ce2e257b4948fa57800000091d7cef0ed9b6a6089b3d7bc35fd943b54a4721326f7bdaa0e8ec63561cde3ea76863572d6b4", @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r5, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x22}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x89}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x80}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4885}, 0x20000040) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x598}, 0x1, 0x0, 0x0, 0x80}, 0x40801) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, r7, 0x805c54497a5ba061, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc060000000000000000000000001000b47a8adc580815f2784ef2addea9ea18c47d05ef0398ecba7d499be56e19"], 0x34}}, 0x0) 08:40:36 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:40:36 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f000000c780)=[{{&(0x7f0000001640)=@un=@abs, 0x80, &(0x7f0000001880)=[{&(0x7f00000016c0)="d4c13f858aaf5edc", 0x8}, {&(0x7f0000001740)="d9", 0x1}, {&(0x7f00000017c0)="84", 0x1}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8004) 08:40:36 executing program 2: semget(0x0, 0x2, 0x180) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'veth0_to_batadv\x00', {0x2, 0x0, @multicast1}}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) sendto$inet(r0, &(0x7f0000001180)="b977f20a3ed5fe3c", 0x8, 0x200408d5, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13, 0x8010, 0xffffffffffffffff, 0xf247a000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000400)={0xaf7e0c50, {{0xa, 0x4e21, 0x3, @private2}}, {{0xa, 0x4e24, 0x4, @ipv4={[], [], @empty}, 0x8001}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x200040c0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 08:40:36 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x80284504, &(0x7f0000000100)=""/184) 08:40:36 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/zoneinfo\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x40010, r0, 0x10000000) 08:40:36 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/zoneinfo\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 929.347300][T19318] mmap: syz-executor.1 (19318) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 08:40:36 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 08:40:36 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8921, &(0x7f0000000040)={'batadv_slave_1\x00'}) 08:40:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="f7908142d613074bde2c75f0e1f062784be9ffb97be9421b9cc30ac300d78726545cdf66cf74bd26770143b4d975419328757abd2d3e09319d0aa507860c1376bf25976e83197887b8b76ee20805976a4fbdf467c56ebf9842a457ab4a61fc57cc401481de27b56ce488e8f923ce4ef3eedbd0e66a842744a3edf28af6dd0ce0f910e6b986e890df51152db99419823c6c94ce1c46fa7f63044c58410a308fe49e5de28c3ad3ce26996bb3c2ee63cced56a14bf0b21483c3befe6ee426", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600"/46], 0x34}}, 0x0) 08:40:36 executing program 4: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0x81031, 0xffffffffffffffff, 0x0) 08:40:36 executing program 3: r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000100)={0x77359400}, 0x10) listen(r1, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) accept$packet(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000014) 08:40:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x14}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:40:36 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='9p\x00', 0x0, &(0x7f0000000500)={'trans=unix,', {[{@version_u='version=9p2000.u'}, {@version_9p2000='version=9p2000'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}]}}) 08:40:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x9) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000000c0)=""/10, 0xa}, {0x0}, {&(0x7f0000000180)=""/112, 0x70}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000380)=""/44, 0x2c}], 0x6, 0x0, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2010050, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000080)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r3, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x3, 0xffffffffffffffff}) write$P9_RREADLINK(r3, &(0x7f0000000040)=ANY=[], 0x16) unshare(0x40600) mkdir(0x0, 0x0) ftruncate(r3, 0x0) [ 929.657128][T19348] 9pnet: p9_fd_create_unix (19348): problem connecting socket: ./file0: -111 [ 929.667804][T19349] 9pnet: p9_fd_create_unix (19349): problem connecting socket: ./file0: -111 08:40:37 executing program 2: semget(0x0, 0x2, 0x180) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'veth0_to_batadv\x00', {0x2, 0x0, @multicast1}}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) sendto$inet(r0, &(0x7f0000001180)="b977f20a3ed5fe3c", 0x8, 0x200408d5, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13, 0x8010, 0xffffffffffffffff, 0xf247a000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000400)={0xaf7e0c50, {{0xa, 0x4e21, 0x3, @private2}}, {{0xa, 0x4e24, 0x4, @ipv4={[], [], @empty}, 0x8001}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x200040c0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 08:40:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00f0000", @ANYRES16=0x0, @ANYBLOB="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"], 0xfd0}, 0x1, 0x0, 0x0, 0x20000801}, 0x10) 08:40:37 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 08:40:37 executing program 1: bpf$OBJ_GET_PROG(0x1a, 0x0, 0x0) 08:40:37 executing program 3: syz_emit_ethernet(0x34, &(0x7f0000000200)={@random="51871255b8ee", @multicast, @val, {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@random, @random="137e42c6ae3f"}, {@random, @current}}}}}, 0x0) 08:40:37 executing program 1: syz_mount_image$hfsplus(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000100)=""/119) 08:40:37 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={0x0, 0x448}}, 0x0) 08:40:37 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/net/pfkey\x00', 0x200100, 0x0) 08:40:37 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fchmod(r0, 0x0) 08:40:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005280)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in=@broadcast}}, 0xe8) 08:40:37 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000002700)={[{@uid={'uid'}}]}) 08:40:37 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000000080)={[{@creator={'creator'}}]}) 08:40:37 executing program 3: r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, 0x0) 08:40:37 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x20202, 0x0) 08:40:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0xfffffd82) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:40:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x17, 0x4) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="00000000044ddb5407e766ca89cfeb3dbcbc55bf804b7ca18798d73826092954ad52ece14a70f545a30409ed5ec14d70102dcffd50c8e9f178118a059ff09e72a029813f2a4ac7a64e5ea4edbb28909ff3fd718c10ccd5d97b42e50964cfc0490e9682cf2b9d613430fcb9823c3fedd3556f527b4364b2d56173574277fce4671753cc62b95d400c6fbf4d13db0471364199b401393b6fdf096ebd4507b8cc0cad6d34a09aa1cf1bfa33736afac0098147b082fb549891eee48fb79aa8cc8b6ff5", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600"/46], 0x34}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180)='802.15.4 MAC\x00', r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0010000", @ANYRES16=r5, @ANYBLOB="010028bd7000fedbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB="cc0025801400040018abcb513ee4a3432937478776e6163524000300bcc7e5499ec54b3c973e0d9386da1aa68ead655761bd1c71737e2a7c87ef69811400040076e982c10d10b6d0cdc62e4171a4f66f24000300b6fa8cb01daf57fd1df5e039c04a910eff342199af68c35ad38193b167758c6350000180080004000000000044000380060003000000000006000300a3aa000006000300a1aa00000c0004000201aaaaaaaaaaaa08000200000000000c0004000201aaaaaaaaaaaa0600010002000000050002000000000008000300", @ANYRES32=0x0, @ANYBLOB="8000258014000400a2032cbb4edb67cf110d1b8e8b64c3fc5400018005000200010000000c000500050000000000000005000200010000000c00050009000000000000000c000500f8ffffffffffffff1c00038006000300ffff0000060001000300000008000200020000001400040029d19839db98ab57654b8e5ddbf867980c00060001"], 0x1d0}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x220, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004085}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x280, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1dca151d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x216c213f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25da64a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4396558b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa3b6af4}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24cb0b56}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa5a6820}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58bec0a0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c75739d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6432f9ac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40a8b643}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x718601de}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x388d0d5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e312b86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b5f65d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x174, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74409ef5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3954208d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5186e5eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a5dd1eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c09a95b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb0e1b69}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x61}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e6de8fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa5fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a49d2c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f87}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x653b599e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab77}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd750}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x787f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf40d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb03a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x129e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59f82baf}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14ebd031}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x11f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x605c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa63}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10632513}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e5170d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e19}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1675ae4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3779}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57d4b789}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43450232}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1576}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5673}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9092}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4871e458}]}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x20040040}, 0x40010) 08:40:37 executing program 2: semget(0x0, 0x2, 0x180) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'veth0_to_batadv\x00', {0x2, 0x0, @multicast1}}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) sendto$inet(r0, &(0x7f0000001180)="b977f20a3ed5fe3c", 0x8, 0x200408d5, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13, 0x8010, 0xffffffffffffffff, 0xf247a000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000400)={0xaf7e0c50, {{0xa, 0x4e21, 0x3, @private2}}, {{0xa, 0x4e24, 0x4, @ipv4={[], [], @empty}, 0x8001}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x200040c0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 08:40:37 executing program 3: r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, 0x0) 08:40:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x891a, 0x0) 08:40:37 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000440)={0x80, 0x1, 'client1\x00', 0x0, "15da9fdc5ccf297f", "a641a3d21210b08ef9834e76f15a5c0fdb432547f7540e18334779af82cfdba7"}) [ 930.859222][T19413] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:37 executing program 3: r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, 0x0) 08:40:38 executing program 0: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@nostrict='nostrict'}]}) [ 930.924149][T19413] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 930.962578][T19413] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 08:40:38 executing program 4: io_setup(0x80000c00, &(0x7f0000000040)) io_setup(0xffff, &(0x7f0000000000)) 08:40:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) [ 930.989395][T19413] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 931.002058][T19413] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 931.022446][T19413] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:38 executing program 3: r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, 0x0) 08:40:38 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x0, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f00000046c0)={0x2020}, 0xffffffffffffff33) 08:40:38 executing program 3: syz_mount_image$hfsplus(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/91, 0x5b) 08:40:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 08:40:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34100903", @ANYRES16=r1, @ANYBLOB="010027bd700000000000010000000800030007000000080002000600000008000200030000000800030004000000"], 0x34}}, 0xb670ffa9f2ed2a18) 08:40:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005280)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback}, 0x2, @in6=@mcast1, 0x0, 0x4}}, 0xe8) 08:40:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003640)) 08:40:38 executing program 1: sched_rr_get_interval(0x0, &(0x7f0000000040)) fork() sched_rr_get_interval(0x0, &(0x7f0000000000)) 08:40:38 executing program 2: semget(0x0, 0x2, 0x180) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'veth0_to_batadv\x00', {0x2, 0x0, @multicast1}}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) sendto$inet(r0, &(0x7f0000001180)="b977f20a3ed5fe3c", 0x8, 0x200408d5, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13, 0x8010, 0xffffffffffffffff, 0xf247a000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000400)={0xaf7e0c50, {{0xa, 0x4e21, 0x3, @private2}}, {{0xa, 0x4e24, 0x4, @ipv4={[], [], @empty}, 0x8001}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x200040c0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 08:40:38 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 08:40:38 executing program 3: syz_mount_image$hfsplus(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 08:40:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1d00060094ae9383d9282660e66e9412ecaa8c832319a9f61ce3275eaecdfa332bae4ab99d669472e12ba889c202", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600"/46], 0x34}}, 0x0) 08:40:38 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000780)) 08:40:38 executing program 4: r0 = open(&(0x7f0000000200)='./file1\x00', 0x94142, 0x0) fgetxattr(r0, &(0x7f0000000000)=@random={'trusted.', '/%@\x00'}, 0x0, 0x0) 08:40:38 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x80402) write$tun(r0, &(0x7f0000000240)={@val, @val, @eth={@local, @empty, @void, {@mpls_mc={0x8848, {[{}], @llc={@llc={0x0, 0x0, "d3", "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"}}}}}}}, 0xdc1) 08:40:38 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x9}, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f134b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) 08:40:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x84, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xffffffff}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00', r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8811) 08:40:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x85}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=""/246, 0xf6}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000001c0)={0x8, 0x7, {r0}, {0xffffffffffffffff}, 0xfffffffffffeffff, 0x9e}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x92, 0x84, 0x0, 0x1, 0x0, 0x4, 0x24400, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x8, 0xbd4c, 0x1ff, 0x8, 0x5, 0x8001}, r4, 0xf, 0xffffffffffffffff, 0x8) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r5, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0) socket$inet(0x2, 0x0, 0x0) 08:40:38 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000180)=0x2) 08:40:38 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@local}, 0x14) 08:40:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x85}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=""/246, 0xf6}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file1\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x92, 0x84, 0x7, 0x1, 0x0, 0x4, 0x24400, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x8, 0xbd4c, 0x1ff, 0x8, 0x5, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x8) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000ff06006d9d45f64a60ebef2c478a8eecf9c6ee8df0ecab4c0600e96d508f07fe3b04dc130a05807913b1f73ab71d6dc45954a82057877482992d410491e76079b7e99a6e319aad462f9691ba629a777fb5d0a0583b7ec4e36f08d215c2de67708a460a8a29a4e41e9ec39b4bc291b928ef9f1b12e68f74ab829bfab487da47080e84bf0d92f72e567b07f8112d75f25cfa60b42e5eafe40debd93f5c8843542ce87ccd81b56a7ae49a9d9c05298ef7f9267d1200e11df000d9fa45e8a8dcbd98d41df16b4ebd66464d000066e11a5463afc56cd9c3ffa277233a378e5cbdf9d18aa6a0eee8e60f2627681241231afcffab6b767130120b75215596d1bc4fb6849874fabbd14fdf723522e65fa0c1c1598d101b737b6dd68457b0b8a034dd0c734ce4e7aab97628569897d804986838614b32e2eb83b4cd0818425042862824672d7ef659a3c2b217d76be42e595d751d8dde26cecba021e627df1e13015900953b2416e6456c9560e298785fe0f9d862f8000000000400b7f90b24204ee5b0370bf6b862765e1c604f179187f6113b7bb899190ffd83d9f3ec78f787a020fcdc91fc334dc2394b3dc3bf0100000000000300dd5f4baa63f744982ebd621a0036e8231e1e5b2d63d4d30be7a1733342ce4eadeafa2a6ca643ed1be45c869a8b4b69bd2d0f3864226586b1eb282db29052c8463c09d239ee2aa7a97a170f7f3afa435df3b9b5d1be8527b5acdc7dea2c69bae4d8115fb6a7bc72e15045dd1d4654ba4bfffffffffffffffb36cacd0f0a25955257cac2fbe3b066a59b27df5fb6e122534b2c59c485b2e9943ffb3401d8713f19009cd2d1c37f68137392f85f04d5791a8a3c2ac7c6e02662b86b577ceef4dcd1e714c2d5e781774d1aa0ff4e0a6dac6b7b09003a7de4c5d2b6a0124ab2cb83d197059dff5229a6a8ed66ad4af9ffffffffffffff8049f1aec539292912f18b082a78496675fb70e50d5184e704d5195a3a487c76145ffde841c0153a5ddbf52a70a63923b5868e5a433969d359a9b965f62d67256f4488cbfbb602e59143a21cf702d524dd1a0000000000000050e7819de503c1a2c4f35964f1bc738adf9bff6c2edd8ba60be9f2dd79a0ba73b74c0ebb2d779856e31ab8083702be81e973969ae9f84576582d576828023a99d84eea9bb538e4eb5992028044f824137587056b928186aaf2114010d9c4bf39cd87997208c32b1df1a2ed39562630040c603fb5ceeb29c10520dfb25f93fbe8e77345f7b9268af4550f1f6cbbd22c13dbdc602b9f746b293e99015fe0860f83198cc668489f3c7374bf71f755d9a5f51b430516bda0d0c6391e4a32f81c0835db1f9a59694f4a3f57ff0f0000000000003faa3356c26fb689d9f4c3a0c1e8edc34073ffea7897e7456a1dfa315144d0bd89c27e2c912f82bc18361464a40802348f920f76a94cf3f102cf07d022ab6bbbb040ff7b2c7aaeb343bf9a401deab2d92a5ff13a2ca3594827a5dba43d8f8f86c67542445cafe559021d78fdffebe8957caa6b122becf002068289cf96f5aa8c9dfd1e3687b5afa39e2f576f79c2c073341fb587d458b62b8f6e818b38df932f34bd26d2c66e9510eac33a706be80367a91f71cafa3d645a4003c3dec409207e97c242d59dbb8086651f57c2e8d44906889226f31b2ba7ac196a78c48f7ded2ddb8791cdc9ae0bfa3027bdf6a217667774b7d50e0b4d51eabd0b9c27b5bb6639aeab43efb25177d0a35501643072d046b3b33cb23b8cc44685e9e0de65f5862da6666aea0199a9d6fe2e980ac54f87b0e88b5b01767dac4202f9f4d3825785a4e885819ac56cb6468154ebe92b00005ab0703369f75d5e6a6c757ea3532a31ea46abc169f7055497c79cedacde5e382a60284fc995823fff29e2bea15e0cda32f4bca87e923483d30436969f3eb3847f04c1dace848c454e86a6f500846fef570014b9da7ccd22b451ce9de5a7d2e02102000000b9be9085ea6d67e310aa56b3863b79a390c1893659dac30f382b7b424e58ee47b2f4100a3bb8fec74163f00d470e7c00000000000000007ddd2f47f0b237013b04a6af556bb92424359a7964dd3d6ffc355848d7596fe02e5d4175cf93e712f434956c6e7ad637fcf00f202089f1a5224c17e4f3b2321d3bea1adefb1b8bfd7d674092320f77c44e590d6a8db290a62cf41bcc3c2e8a836b0da267290246aef3e9f3bf25db7ffc85d2f3c43ea03d0e2663a25db39a28540726f40866ade825e354b0afb470a53d93cdef00000000000000000000000000000049c2d322707524971076de995cc174293f39dbf8556bcdbcb73a5ac9d01e202bd0d5b8202285e1037b973223b5f430f1241c30a8bf6c4bae4ae07c541afa5dc6a513cea10d6ba6e3cb2f63b8726271adcc754321b64fd26a2331ba0c93f008007dc466aed14afa63d731f87263000000000000000000000000000000000000000000000000000000000000000000000000b14b338037bee9e7b533560a9116053751fd1d9cd954854a00b9b82460860cd734f995bb69e38826db989d2fb5ec8c0b1e9dc7565822ee16828c708681f0925cc6464f70f80998b6707ccf9baabbbc081e566fb9f5917e16a14a6f96a8d8290331dd255ae4251d1101f173a4d84dceb3eac926e83559d844e7266e197978e7d832fdab14b3"], 0x18}}], 0x1b1, 0x0) socket$inet(0x2, 0x0, 0x0) 08:40:39 executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) recvmmsg(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20012000, 0x0) 08:40:39 executing program 3: r0 = semget(0x1, 0x0, 0x0) semtimedop(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 08:40:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="8ef38c4356f2501f901f00a89c007f650e45c0898bc69605ba8d87e3a020fbba5cd96876af1e658734de9589478646e59f9493cf07423b4817685b0ca774570ade9f51dead49a1aa3df7822df688495fc2a173f9d2c54dced7c9a476468b265668f52212dfe9390ed76b8657f528af355efa44a9ac5526fc11cd237bfc804628293a6625807135a7522f03799d089c0c1902dd5a256eb9df8334f5b83eec323f17bc9ff94614d5398f13fe867fa275e807a8c0541ecfa0e372be0b50ea18133210f41ac4ef5d6c9a292303afcdb1151204", @ANYRES16=r1, @ANYBLOB="0100813d514d9748060001000a000000060005e04e2000"/38], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r3, 0x400, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', r3) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800e4113504d96d607db780e08f5d26361c681ed44885f22dc209a5b312f8df0a58b8af52ac255535e5a6fd2d4a2df6bc8abc22740dedfd79e253f77243bc0dce23ddac75627739d7609f63095a29018ede1be107", @ANYRES16=r4, @ANYBLOB="00022bbd7000fcdbdf25040000002c000180080006000600000008000600000000000800060005000000060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB="080002000800000008000300010000000800020001000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 08:40:39 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x1) 08:40:39 executing program 2: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@unhide='unhide'}]}) 08:40:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000040)='r', 0x1) [ 932.183871][T19517] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 932.191489][T19517] UDF-fs: Scanning with blocksize 512 failed [ 932.197791][T19517] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 932.205968][T19517] UDF-fs: Scanning with blocksize 1024 failed [ 932.213184][T19517] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 932.271829][T19517] UDF-fs: Scanning with blocksize 2048 failed [ 932.281088][T19517] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 932.293856][T19517] UDF-fs: Scanning with blocksize 4096 failed [ 932.349391][T19517] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 932.356900][T19517] UDF-fs: Scanning with blocksize 512 failed [ 932.363750][T19517] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 932.374073][T19517] UDF-fs: Scanning with blocksize 1024 failed [ 932.380504][T19517] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 932.389928][T19517] UDF-fs: Scanning with blocksize 2048 failed [ 932.396546][T19517] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 932.406051][T19517] UDF-fs: Scanning with blocksize 4096 failed 08:40:39 executing program 1: r0 = semget(0x1, 0x0, 0x0) semtimedop(r0, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}], 0x1, &(0x7f0000000100)={0x0, 0x989680}) 08:40:39 executing program 4: r0 = creat(&(0x7f0000002200)='./file0\x00', 0x0) write$FUSE_LK(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) open(&(0x7f00000000c0)='./file0\x00', 0xe00, 0x0) 08:40:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffff7e, &(0x7f0000000180)={0x0}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002a40)='/dev/null\x00', 0x80000, 0x0) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f0000002f80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ac0)={0x458, 0x3f3, 0x302, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0xd, [0x8000, 0x80000000, 0xfffffffd, 0xc8f, 0x40, 0xd21d, 0x400, 0x4, 0x3, 0x920, 0x3, 0x9, 0x7ff, 0x5, 0x1, 0x1, 0x6, 0x8, 0x3, 0x3931d762, 0x61, 0x1, 0x80000000, 0x9, 0xffff797e, 0xd4, 0x80, 0x8, 0x200, 0x6, 0x4, 0x80000000, 0x4b03, 0x4, 0x0, 0xffff91d9, 0x800, 0x400, 0xffffffff, 0x8000, 0x100, 0xffff, 0x1ff, 0x0, 0xffffffff, 0x1, 0x20, 0x400, 0xa08, 0x3ff, 0x6, 0x0, 0x9f1, 0xfffffffe, 0x0, 0xfff, 0x4, 0x8, 0x3, 0x1, 0x80000000, 0x400, 0x3, 0x5], [0x1, 0x7, 0x0, 0x0, 0x2b47, 0xfffff6db, 0xe282, 0x1, 0xd4, 0x3, 0x2, 0xec, 0x5, 0x7, 0x1f, 0x9, 0x1, 0x1ff, 0x6, 0x80, 0x97e, 0x7, 0x1f, 0x1, 0x2, 0x2, 0x6, 0x81, 0x9, 0x2, 0x7fff, 0x5, 0x7, 0x7f, 0x3, 0x7, 0x5, 0x4, 0x4, 0x9, 0x2, 0x9, 0x9481, 0xffffffff, 0x3, 0x1, 0x3, 0x0, 0x0, 0x81, 0x40, 0x0, 0x461, 0x5d9, 0x7, 0x5, 0x1, 0x0, 0x200, 0x0, 0x1, 0x20, 0x9, 0x6b], [0x10000, 0x8, 0x0, 0x2, 0x8f0a, 0x7, 0x81, 0x10001, 0x1, 0x5, 0x20, 0x40, 0x4, 0x6, 0x5, 0x9, 0x4, 0x40, 0x9a48, 0x0, 0x6, 0xffff, 0x8001, 0xff, 0xc3, 0x2, 0x7, 0x2, 0x100, 0xfffffe00, 0x3, 0x0, 0x4, 0x5, 0xb6, 0x2, 0x100, 0x0, 0xea, 0x2000, 0x1, 0xff, 0xffff8e1d, 0x85, 0x7, 0xffff, 0x7fffffff, 0x9, 0xf05, 0x10000, 0x4, 0x7, 0x6, 0x1, 0x800, 0x58aa, 0x1f, 0x5, 0x5, 0x95, 0x3, 0x800, 0x3, 0x3], [0x7, 0xe5a, 0x6, 0x200, 0x200, 0x1ff, 0x0, 0x6, 0x4, 0x8, 0x2, 0xffff7144, 0x425, 0x7, 0x10001, 0x2f, 0xffff, 0x1000, 0x3, 0x1ff, 0x5, 0x6f400000, 0x8, 0x81, 0x8, 0xa7, 0x4b7e, 0xfffffffe, 0x8, 0xe4, 0xffffffc0, 0x5, 0x7fffffff, 0x5, 0x0, 0xffffffff, 0x800, 0x100, 0x7, 0xffc0000, 0x5, 0x20, 0x6a, 0xa7, 0x3, 0x0, 0x6, 0x200, 0x7fff, 0x4, 0x17, 0x9, 0x5, 0x3f, 0x5, 0xfffffff9, 0xf7, 0x0, 0x7, 0xfff, 0x7, 0x4, 0x0, 0x9], 0x35, ['syztnl0\x00', '\x00', '!.{,!)-\x00', '^*\x00', 'syztnl0\x00', ']][%-+\x00', '[{!]/:*&\x00', 't:[]}\'-#\x00']}, ["", ""]}, 0x458}, 0x1, 0x0, 0x0, 0xb6dc9aec3954fce}, 0x20040001) bind(r5, &(0x7f0000007b40)=@vsock={0x28, 0x0, 0x2710}, 0x80) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x73) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r7, @ANYBLOB="8100000000000000280012000900010076657468"], 0x48}}, 0x0) r8 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x300f828, [], [{}, {0x801, 0x0, 0x80000001}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000007d40)={'syztnl2\x00', &(0x7f0000007cc0)={'syztnl0\x00', r7, 0x29, 0x0, 0x9, 0x8, 0x62, @mcast1, @remote, 0x7800, 0x10, 0xcc, 0x4}}) sendmsg$nl_route(r3, &(0x7f0000007e40)={&(0x7f0000007bc0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000007e00)={&(0x7f0000000280)=@newlink={0x70, 0x10, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1f}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}]}, @IFLA_MAP={0x24, 0xe, {0x8, 0x396, 0x2, 0x91ee, 0x1, 0x26}}, @IFLA_NET_NS_FD={0x8, 0x1c, r8}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x20042004) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007ed8d5fa4a20500c50900000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x64, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x64}}, 0x10) 08:40:39 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x48e01) 08:40:39 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet(0x2, 0xa, 0x0) dup2(r0, r1) 08:40:39 executing program 2: io_setup(0xffff, &(0x7f0000000040)) 08:40:39 executing program 3: creat(&(0x7f0000002200)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x11008, &(0x7f0000000340)) 08:40:39 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @isdn, @generic={0x0, "44db899f4cadb456b2faa0d601fd"}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="fef917137bce"}}) 08:40:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005280)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0xf2b1fac8399f4b9d}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, 0xe8) [ 932.860803][ T36] audit: type=1804 audit(1615797639.865:237): pid=19550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374093859/syzkaller.bFPNkm/3726/file0" dev="sda1" ino=15522 res=1 errno=0 [ 932.892302][T19548] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:39 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/seq\x00', 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) dup2(r1, r0) 08:40:40 executing program 2: r0 = semget(0x0, 0x0, 0x0) semctl$GETZCNT(r0, 0x4, 0xf, 0x0) [ 932.949930][ T36] audit: type=1804 audit(1615797639.905:238): pid=19551 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374093859/syzkaller.bFPNkm/3726/file0" dev="sda1" ino=15522 res=1 errno=0 08:40:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0xc) 08:40:40 executing program 0: sched_rr_get_interval(0x0, &(0x7f0000000100)) 08:40:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "2b4f7e5176118ca6"}) [ 933.044498][T19560] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:40 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) 08:40:40 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x9000) 08:40:40 executing program 2: socket(0x1, 0x0, 0x88b) 08:40:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @empty}, 0xc) 08:40:40 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x82, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x0, 0x0) dup(0xffffffffffffffff) 08:40:40 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000000c0)) 08:40:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@multicast1, @dev}, 0xc) 08:40:40 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005280)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in6=@mcast1}}, 0xe8) 08:40:40 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@size={'size', 0x3d, [0x0]}}]}) 08:40:40 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002680)={0x2020}, 0x2020) 08:40:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600"/46], 0x34}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00', 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f0000000600)={&(0x7f00000002c0)=@tipc, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000480)=""/166, 0xa6}, {&(0x7f00000003c0)=""/94, 0x5e}], 0x3, &(0x7f0000000580)=""/116, 0x74}, 0x20) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ocfs2_control\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000180)=ANY=[@ANYBLOB="460400003964c7148dc5a325451f1da250d4e1f34967e342cc5436da7abf9f3c98e9766406fbbacebdaeea8b9addb656d3989bf030dc5930fe38c1967d44ea184384fc", @ANYRES16=0x0, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r1], 0x4}}, 0x8001) r3 = socket$inet(0x2, 0x6, 0x9) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000240)=0xc) r4 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r5, 0x400, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640)='ethtool\x00', r5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="040027bd7000fedbdfbf09b8e0d06b44933911b2d848b1abf592cf31444ed87cb4"], 0x14}}, 0xc001) 08:40:40 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2460}, 0x0) 08:40:40 executing program 3: creat(&(0x7f0000002200)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0xe00, 0x0) 08:40:40 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[]) pipe(&(0x7f0000001440)) [ 933.307017][T19601] tmpfs: Bad value for 'size' [ 933.318308][T19601] tmpfs: Bad value for 'size' 08:40:40 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='.\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000340)={[{@dmode={'dmode'}}]}) 08:40:40 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) getpid() ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 08:40:40 executing program 4: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xff}) 08:40:40 executing program 0: creat(&(0x7f0000002200)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x11008, &(0x7f0000000340)) open(&(0x7f00000000c0)='./file0\x00', 0xe00, 0x0) [ 933.409920][ T36] audit: type=1804 audit(1615797640.415:239): pid=19611 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir498336210/syzkaller.wllFVb/3633/file0" dev="sda1" ino=14526 res=1 errno=0 08:40:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000008700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000a80)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x68}}, 0x0) [ 933.505636][ T36] audit: type=1804 audit(1615797640.515:240): pid=19625 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir161894903/syzkaller.KW17cM/3953/file0" dev="sda1" ino=14523 res=1 errno=0 08:40:40 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x41, 0x0) write$char_usb(r0, 0x0, 0x0) 08:40:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[], 0x468}, 0x0) 08:40:40 executing program 0: syz_mount_image$fuse(&(0x7f0000000100)='fuse\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x48, &(0x7f00000003c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id'}}) [ 933.532688][ T36] audit: type=1804 audit(1615797640.545:241): pid=19626 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir161894903/syzkaller.KW17cM/3953/file0" dev="sda1" ino=14523 res=1 errno=0 [ 933.533759][T19619] ISOFS: Unable to identify CD-ROM format. [ 933.632649][T19635] fuse: Bad value for 'fd' [ 933.637725][T19635] fuse: Bad value for 'fd' [ 933.707773][T19619] ISOFS: Unable to identify CD-ROM format. 08:40:41 executing program 5: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000a80)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x68}}, 0x0) recvmmsg(r0, &(0x7f00000036c0)=[{{&(0x7f0000000580)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)=""/92, 0x5c}], 0x1, &(0x7f00000006c0)=""/118, 0x76}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10040, &(0x7f00000037c0)={0x77359400}) 08:40:41 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x41, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 08:40:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @empty}, 0xc) 08:40:41 executing program 3: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='mode=00000000000000000000000,gid=forget,session=00000004000000']) 08:40:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x85}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=""/246, 0xf6}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file1\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x92, 0x84, 0x7, 0x1, 0x0, 0x4, 0x24400, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x8, 0xbd4c, 0x1ff, 0x8, 0x5, 0x8001}, 0x0, 0xf, 0xffffffffffffffff, 0x8) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0) socket$inet(0x2, 0x0, 0x0) 08:40:41 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 08:40:41 executing program 0: syz_mount_image$udf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x0) 08:40:41 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x65]}}], [{@context={'context', 0x3d, 'root'}}]}) 08:40:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x80080) clock_nanosleep(0x7fffffffffffffff, 0x0, &(0x7f0000000040), 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, r1, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x810) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x80402) write$tun(r0, &(0x7f0000000240)={@val, @val, @eth={@local, @empty, @void, {@mpls_mc={0x8848, {[], @llc={@llc={0x0, 0x0, "d3", "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"}}}}}}}, 0xdc1) [ 934.357001][T19672] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 08:40:41 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x100, 0x6}) [ 934.430711][T19687] tmpfs: Unknown parameter 'context' 08:40:41 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) 08:40:41 executing program 3: r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xa51}], 0x2) 08:40:41 executing program 5: getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x8, 0x4, 0x100, 0xff00, 0x20, 0x40, 0xffffffff, {0x0, @in6={{0xa, 0x4e21, 0x2, @remote, 0xffffffe1}}, 0x6, 0x9, 0x5, 0x0, 0x7}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={r0}, &(0x7f00000001c0)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="dccd023544ae07551e378970c39e538797e052670d8cc94d1a63a4e86160c1e1925f3cd41ee35b49bfc8c79630ffc2575f855054b9f081b65d2023bb9d45fb1aef5eaf5a5470f0a409cd5186487eac15038b7adb876f2a9fb5cb94b1fd64d61bbf5ca26b7939f8a1d40f1678d3e75e62840636435c00cba18cf53d5dec486bd98dfeaa0f5b5a4e49786ed4461f6dd091281f831e80d63b0823", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600"/46], 0x34}}, 0x0) [ 934.462509][T19687] tmpfs: Unknown parameter 'context' 08:40:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@private, @rand_addr=0x64010100}, 0xc) 08:40:41 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='umask=00000000000000000000706,gid=', @ANYRESHEX]) [ 934.528491][T19685] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 934.556957][T19685] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 08:40:41 executing program 3: shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/231) 08:40:41 executing program 2: timer_create(0x2, 0x0, &(0x7f0000000040)) timer_delete(0x0) 08:40:41 executing program 4: openat$zero(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) 08:40:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x32) [ 934.653949][T19706] hfsplus: invalid gid specified [ 934.667501][T19706] hfsplus: unable to parse mount options 08:40:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x28}}, 0x0) 08:40:41 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x80801, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x5, 0x3}, 0x8) 08:40:41 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x3f}}) 08:40:41 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x37, 0x65, 0x0]}}]}) [ 934.746490][T19706] hfsplus: invalid gid specified [ 934.751887][T19706] hfsplus: unable to parse mount options 08:40:41 executing program 4: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 08:40:41 executing program 0: sysinfo(&(0x7f0000000040)=""/196) 08:40:41 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 08:40:41 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[], [{@appraise='appraise'}]}) 08:40:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000a020}, 0x24000001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x80, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x1e}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "be05975dd7"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:41 executing program 3: timer_create(0x2, &(0x7f0000000000)={0x0, 0x2d, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_delete(0x0) 08:40:41 executing program 1: r0 = open(&(0x7f0000000200)='./file1\x00', 0x94142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3}) 08:40:42 executing program 0: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@session={'session'}}, {@unhide='unhide'}]}) 08:40:42 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet(0x2, 0xa, 0x5) dup2(r0, r1) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 08:40:42 executing program 3: r0 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000380)=[0x100]) 08:40:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xc4000, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000a80)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x68}}, 0x0) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:40:42 executing program 0: syz_mount_image$fuse(&(0x7f0000002200)='fuse\x00', &(0x7f0000002240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000042c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read'}}]}}) [ 935.021598][T19751] tmpfs: Unknown parameter 'appraise' [ 935.057102][T19751] tmpfs: Unknown parameter 'appraise' 08:40:42 executing program 4: setreuid(0x0, 0xee00) r0 = geteuid() prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) setreuid(r0, 0x0) setuid(0x0) 08:40:42 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @multicast, @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @multicast1, @private}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "fc648f", 0x0, "2047b1"}}}}}}, 0x0) 08:40:42 executing program 3: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xaaaaaaaaaaaab8d, &(0x7f00000001c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d6f646530300a6691a2e2614b422c6769643d666f72ad2bbdee8e5aa9fffb6765740c73657359696f6e3d30303030303030303030303030303030b03030302c62733d3030b030303030303030303030303030303030302c00"/103, @ANYRES32, @ANYRES32=0x0]) 08:40:42 executing program 5: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fcff0100"/46], 0x34}}, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r0, 0x400, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x40051) 08:40:42 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) [ 935.145225][T19770] fuse: Bad value for 'fd' [ 935.150526][T19770] fuse: Bad value for 'fd' 08:40:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000), 0x4) 08:40:42 executing program 4: r0 = open(&(0x7f0000000200)='./file1\x00', 0x94142, 0x0) io_setup(0x4e7f, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 08:40:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x400c0) 08:40:42 executing program 1: creat(&(0x7f0000002140)='./file0\x00', 0x0) 08:40:42 executing program 0: socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0xfffffd82) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:40:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0xb8, 0x0, 0x8, 0x501, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x1000001}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x200}]}]}, 0xb8}}, 0x1850) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000ed7466c088a9352a218d19513b3cd951d05f0e9b583f5d5feb415ff4531b27e52c53efeca1ec2197092a441b0a05becd232ce2e257b4948fa57800000091d7cef0ed9b6a6089b3d7bc35fd943b54a4721326f7bdaa0e8ec63561cde3ea76863572d6b4", @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0xe}}}}, ["", ""]}, 0x28}}, 0x11) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r6, 0x400, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 08:40:42 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x1}, &(0x7f0000000100)={0x0, 0x989680}, 0x0) 08:40:42 executing program 1: fchownat(0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0x0) 08:40:42 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0xa0000, 0x0) 08:40:43 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x64002, 0x0) 08:40:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x9, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00', r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="34009626f2146cfe6cb74d450b320000", @ANYRES16=r0, @ANYBLOB="20012a01000000dbdf250100000000000100000000d7bf0000180017000000070000000765683a766574e34d000048164314aa4aebf43afd78b8ba44b113268659b6f0bf83d3d21ff5756cb5281c913635e55cf881a66ca6ef03a2dd1990dcff9dac"], 0x34}, 0x1, 0x0, 0x0, 0x24004040}, 0x40000) r2 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$int_out(r2, 0x2, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="34192000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002000018014000400fe8000000000000000000000000000300500020008000000"], 0x34}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x2, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x40000) 08:40:43 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000440)=""/164, 0x26, 0xa4, 0x1}, 0x20) 08:40:43 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0]}}, &(0x7f00000000c0)=""/215, 0x3a, 0x10001, 0x1}, 0x20) 08:40:43 executing program 1: bpf$BPF_TASK_FD_QUERY(0x10, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 08:40:43 executing program 0: syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0xffff}], 0x0, &(0x7f0000000340)) 08:40:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="fc92c164ad176b807aa5b89e77e5b0942a75b190074b7a758fc250cfdd761ee1af39b6d58a58fc192922b6ff4481c81d917df8ea91f61392f6bee7d6985339cb6f6e53f18a915d1b2acfc778663f38e3fde0b5ceb18338438ada2073e986b1d6b0a833c475860993b0c83b2adf46c0c26d797fed5c88fa5fee37b513bc24d0fcbe3fefa6080f97450c551c62dd047e4eef9bbd33c6", 0x95}], 0x1}, 0x0) recvmsg(r1, &(0x7f000001b040)={&(0x7f0000019cc0)=@can, 0x80, &(0x7f000001af80)=[{&(0x7f0000019d40)=""/72, 0x48}, {&(0x7f0000019dc0)=""/77, 0x4d}, {&(0x7f0000019e40)=""/6, 0x6}], 0x3, &(0x7f000001b000)=""/20, 0x14}, 0x0) 08:40:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff}) close(r0) 08:40:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$x25(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x12, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3a0, r3, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc1, 0x800, 0x4, 0x0, 0x16de, 0x5, 0x200, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0x76, 0x5, 0x2, 0x60]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x30, 0x6, 0x36, 0x2, 0x3, 0x12, 0x3]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x4}, {0x4, 0x1}, {0x6, 0x2}, {0x4, 0x5}, {0x6, 0x2}, {0x2, 0x7}, {0x4, 0x8}, {0x5, 0x5}, {0x4}, {0x0, 0x1}, {0x7}, {0x3, 0x3}, {0x4, 0x2}, {0x0, 0x1}, {0x5, 0x2}, {0x6, 0x4}, {0x3, 0x3}, {0x5, 0xa}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0xa}, {0x0, 0x2}, {0x4}, {0x1, 0xa}, {0x3, 0x5}, {0x6, 0x2}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x2}, {0x7, 0x2}, {0x1, 0x8}, {0x7, 0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8ba7, 0x4, 0xe5, 0x0, 0x1, 0xc2, 0x3, 0xd]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x66, 0x60, 0x5, 0x6c, 0x6c, 0x18, 0x6, 0x60, 0x16, 0x5]}]}]}, @NL80211_ATTR_TX_RATES={0x1b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x5}, {0x6, 0x6}, {0x1, 0x2}, {0x4}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x5}, {0x4, 0x8}, {0x0, 0x4}, {0x5, 0x9}, {0x6, 0xa}, {0x4}, {0x4, 0x1}, {0x5, 0x7}, {0x0, 0xa}, {0x1, 0xa}, {0x2, 0x9}, {0x1, 0x7}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x6}, {0x2, 0xa}, {0x6, 0xa}, {0x3, 0x9}, {0x5, 0x3}, {0x4, 0x3}, {0x4, 0x9}, {0x0, 0x4}, {0x6}, {0x2, 0x9}, {0x4, 0x9}, {0x7, 0x4}, {0x6, 0x5}, {0x7, 0x7}, {0x7}, {0x3, 0x4}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x4}]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0xa019, 0x5, 0x3f, 0x101, 0xfff8, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x8}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0x5}, {0x4}, {0x4, 0x7}, {0x3, 0x4}, {0x2, 0x9}, {0x5, 0x1}, {0x4, 0x4}, {0x1, 0x7}, {0x6}, {0x6, 0xa}, {0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x16, 0x36, 0x6, 0x2, 0x30, 0x1, 0x24, 0xb, 0x36, 0x1b, 0x36, 0x4, 0x4, 0x60, 0x1, 0x36, 0x60, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0xb6, 0x2, 0x1, 0xfffc, 0x5]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0x4, 0x16, 0x1, 0x1b, 0x2]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x5, 0x8}, {0x3, 0x8}, {0x0, 0x2}, {0x7, 0x2}, {0x4, 0x6}, {0x2, 0x5}, {0x4, 0x7}, {0x3, 0xa}, {0x4, 0x9}, {0x1, 0x7}, {0x1, 0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x0, 0x7}, {0x2, 0x4}, {0x0, 0x1}, {0x6, 0x3}, {0x0, 0x6}, {0x7, 0x6}, {0x2, 0x8}, {0x3, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x4, 0x4}, {0x5}, {0x0, 0x6}, {0x5, 0x1}, {0x3, 0x2}, {0x3, 0x6}, {0x7, 0x9}, {0x2, 0x9}, {0x7, 0x9}, {0x0, 0x3}, {0x3}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x7}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0x6}]}]}, @NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x3}, {0x4, 0x1}, {0x4, 0xa}, {0x3, 0x7}, {0x2, 0x7}, {0x0, 0x8}, {0x1, 0xa}, {0x1}, {0x0, 0x6}, {0x3, 0x7}, {0x1}, {0x1, 0x1}, {0x6, 0xa}, {0x6, 0x8}, {0x1, 0x8}, {0x3, 0x5}, {0x1, 0x7}, {0x1, 0x7}, {0x2, 0x9}, {0x7, 0x7}, {0x3, 0x7}, {0x3, 0x4}, {0x1}, {0x1, 0x9}, {0x6, 0x6}, {0x2, 0x4}, {0x6, 0x8}, {0x0, 0x4}, {0x1}, {0x7, 0x8}, {0x6, 0x2}, {0x4, 0x8}, {0x1}, {0x6, 0x3}, {0x3, 0x5}, {0x7, 0x1}, {0x3, 0x9}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x2}, {0x0, 0x3}, {0x2, 0x5}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0x7}, {0x6, 0x1}, {0x1, 0x8}, {0x2, 0x2}, {}, {0x1, 0x3}, {0x0, 0x4}, {0x7, 0x1}, {0x5}, {0x0, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x16, 0xb, 0x24, 0x30, 0x36, 0x6, 0x3, 0x4, 0x77, 0xdd, 0x36, 0x1b, 0xc]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0x4}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x2}, {0x0, 0x8}, {0x2, 0x3}, {0x2, 0x6}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x7, 0x1}, {0x4, 0x4}, {0x3, 0x5}, {0x4}, {0x6, 0x8}, {0x4, 0x4}, {0x7, 0x7}, {0x1}, {0x0, 0x8}, {}, {0x2}, {0x0, 0x2}, {0x4, 0x6}, {0x2}, {0x3, 0x1}, {0x0, 0xa}, {0x3, 0x3}, {0x2, 0x8}, {0x7, 0x2}, {0x3, 0x7}, {0x0, 0x8}, {0x4, 0x1}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x7}, {0x3, 0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0xa}, {0x3, 0x8}, {0x5, 0x9}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x6, 0x3}, {0x5, 0x1}, {0x2, 0xa}, {0x7, 0x5}, {0x7, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x5, 0x1}, {0x6, 0x8}, {0x0, 0x3}, {0x4, 0xa}, {0x4, 0x7}, {0x4}, {0x1, 0x1}, {0x1, 0x2}, {0x1, 0x5}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x6}, {0x1, 0x7}, {}, {0x2, 0x1}, {0x7, 0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x6, 0x5}, {0x4}, {0x7, 0x8}, {0x2, 0x8}, {0x7, 0x8}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x2}, {0x7, 0x1}, {0x2, 0x4}, {0x0, 0x2}, {0x1, 0x1}, {0x1, 0x5}, {0x0, 0x3}, {0x5, 0x7}, {0x6, 0x1}, {0x1, 0x3}, {0x3, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x4, 0x7}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x6}, {0x7, 0x7}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x6, 0x4}, {0x1, 0x6}, {0x6, 0x1}, {0x6, 0x2}, {0x5, 0x5}, {0x7, 0xa}, {0x0, 0x3}, {0x0, 0x2}, {0x6, 0x8}, {0x1, 0x2}, {0x1, 0x2}, {0x4}, {0x0, 0x3}, {0x0, 0x3}, {0x2, 0x1}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x6}, {0x0, 0xa}, {0x4, 0x8}, {0x1, 0x8}, {0x4, 0x5}, {0x2, 0x3}, {0x3, 0x7}, {0x0, 0xa}, {0x2, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x13c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x2, 0x2, 0x24, 0x30, 0xc, 0x5, 0x1, 0xb, 0x0, 0x5, 0x5, 0x5, 0x9, 0x6, 0x2, 0x1b, 0x16, 0x48, 0x2, 0x1, 0x24, 0xc, 0x18, 0x36, 0x6c, 0x1b, 0x48, 0x18, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x36, 0x16, 0x48, 0x36, 0x0, 0x3, 0xb, 0x6, 0x1ea4b97db69e9385, 0x6, 0x30, 0x4, 0x3]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x2}, {0x5, 0x8}, {0x2, 0xa}, {0x1, 0x2}, {0x4, 0x3}, {0x6, 0x2}, {0x2, 0x6}, {0x3, 0x1}, {0x0, 0xa}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0xa}, {0x3, 0xa}, {0x4, 0x1}, {}, {0x5, 0x5}, {0x1, 0x7}, {0x1, 0x8}, {0x2, 0x6}, {0x2, 0x8}, {0x7, 0x5}, {0x2}, {0x0, 0x6}, {0x3, 0xa}, {0x7, 0x4}, {0x7}, {0x6, 0x7}, {0x7}, {0x3, 0x6}, {0x0, 0x5}, {0x3}, {0x7, 0x1}, {0x3}, {0x4, 0x8}, {0x6, 0x8}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0x7, 0x8}, {0x7, 0x2}, {0x0, 0x7}, {0x2, 0x7}, {0x1, 0x3}, {0x4, 0x9}, {0x6, 0x2}, {0x7, 0x1}, {0x7, 0x8}, {0x4, 0x5}, {0x3, 0xa}, {0x1}, {0x0, 0x6}, {0x5, 0x8}, {0x7, 0xa}, {0x0, 0x8}, {0x4, 0x9}, {0x6, 0x2}, {0x4, 0x4}, {0x6}, {0x4, 0x3}, {0x7, 0x4}, {0x0, 0xa}, {0x7, 0x1}, {0x7, 0x8}, {0x4, 0x7}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xec, 0x3ff, 0xff, 0x6, 0x2, 0x4, 0xff, 0x718]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x200, 0x0, 0x7fff, 0x0, 0x400, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x4f8, 0x2, 0x7ff, 0x4, 0x1f, 0x7]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x1ff, 0xfff7, 0x902, 0x5, 0x5, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x7, 0x2}, {0x2, 0x7}, {0x3, 0xe}, {0x2, 0x3}, {0x3, 0x3}, {0x4, 0x7}, {0x1, 0x1}, {0x2, 0x9}, {0x2, 0x3}, {0x2}, {0x6, 0x7}, {0x3, 0x5}, {0x6, 0x7}, {0x5, 0x7}, {0x2, 0xa}, {0x2, 0x8}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x2}, {0x6, 0x4}, {0x2, 0x9}, {0x3, 0x7}, {0x1, 0x6}, {0x2, 0x2}, {0x3, 0x6}, {0x7, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x5, 0x6}, {0x4, 0x8}, {}, {0x0, 0xa}, {0x4, 0x4}, {0x1, 0xa}, {0x4}, {0x7, 0x7}, {0x7, 0x2}, {0x2, 0x3}, {0x4, 0x3}, {0x1}, {0x2, 0x8}, {0x3, 0x6}]}]}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x40}, 0x20044010) 08:40:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) close(r0) 08:40:43 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x60203, 0x0) 08:40:43 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000021780)={0x11, 0x3, &(0x7f000001c9c0)=@framed, &(0x7f000001ca40)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:40:43 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x36, 'v'}], 0x18}, 0x0) 08:40:43 executing program 1: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:40:43 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000016c0)="f9", 0x1}, {&(0x7f00000017c0)="1e", 0x1}], 0x2}, 0x0) 08:40:43 executing program 5: writev(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000240)="f85a7063fe686000a5958c8c65e2af31c099339b387110c8e1125e"}, {&(0x7f0000000040)="9a4b0c5420a5"}, {&(0x7f0000000180)="f2a1dc0cde1a5a41b65b30021cf7bfe9b30f000f155aa6ae311096d3580b4d4349685adfe3e90cd154fb2f92e903c677e113d964bc6d09d4155b1bf3badaf9f055a1badf8f8890542547ae2fa91866caba77addd05e2f665d43d29ea323ad01146c797f1ddc65d60658d63812903f699703d862bcd376fb08325d2305874a8a7b494830c4b0267498d33dbf4b70bab22ef"}, {&(0x7f0000001680)="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"}, {&(0x7f00000012c0)="85474dd42ca5d2e03af732d388cf044b6536d26065dd2eb22ed7da6d879b604b0ceff589cf99ce763cb5a151ba8728ededc92fa8b4b2cb6191d3cecf49180ab872f668634df95879c27a0eaf4d309f666e76e1537c8b75d2cbebd0d324bc32c1652ad7120d8103ba35857458f12ff0c256aaffe4098ec2279aef45eabfd0ade15e9654a5bdd040008afde10280925fa06d5ab78c6b241071cd4ff09d46b296a901164145450e494b46db9435429182509dd270e50a7bfc87349a71822c0e82bff30c07143d46fee30df3077bd2ec4d6c44f98601bb709006b6050df204687b11ea074fed6b8572f37986a8723cd496d8fdab71c1"}, {&(0x7f00000013c0)="5f5f4bfa54e73c86da573ce15acb1e6bbd5dbb9de98193de28f5ce01a1a104203a938b50acdc6a984837293132cd8a3ac2a076baa60b2c31bb18049fd2a180c50ae86eda03c5556dc57e449f3d2fc16a2a02389afa097a1c6e2f757afcb713d9617ac10317d0c06202d782f7107724bba1f2729a632220784ffa81d3d3af2de4c9f1a25498bf64f44010a0a5503352a784423a6fb1aa798a3995d0398f3d6e4b55be7e43f4b83306de268405f7a8d1372cd10e0c38471bdeabe4cd3e343da00a37a85b0432e6b4b17865625bdbb3f2b7bd68a635b0ec44fb418816ef65b4e915e91ee61e4a66b5fdc41ecd3df879e211d6f8afb47b5e515d8b2b1d86"}, {&(0x7f0000000080)="64cedbdd0ce5b7e1c7e4f7b7d231b2b7053018e7b58af5db1e9f87c31d87b6d6a43d4b1650240709c2f875e3e1734f1d333daa68a8a6b2"}, {&(0x7f00000014c0)="296c63cd5972854ad2d204e36aa4ed621a89a9eed554470cc5fc85e0195840e0ff3855e4b1fc40052eaf5b2050bf6fa2b67c4aa6a189f41458ac948be7d40cc738aae35deea6d7ea78ccdf22ff836c843ff00aa36c7ea4207f93f30f1fe852e1093f495903feb339581009b9c9b432fd2ffe34868896e70ed0cc2d90245899745408d781831ea30318a2e130f479dc44d5bbdf4cb5405a40bd1db3f562d77608226546646a761951acad91f48099255ad7dcbcad36f4e9a0e7ffe99edcc6556b1ed55aa81d8a53df26e94cfa2ef5fb5fa26c63cc4cd382aba970124f"}, {&(0x7f00000000c0)="64b6689dddadae3f39ca8969e298779a12ab8ed75acdb4b9b23052912210557607f1fbe59de3df24ea43b75bad0f2d15b0"}], 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="7cea5e530000000000000100000080060001000a00000014000400fc06001d000000008e75000800000000"], 0x34}}, 0x0) 08:40:43 executing program 2: perf_event_open$cgroup(&(0x7f0000001f80)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) 08:40:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="fc", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f000001b040)={0x0, 0x0, &(0x7f000001af80)=[{0x0}, {&(0x7f0000019dc0)=""/77, 0x4d}], 0x2}, 0x0) 08:40:43 executing program 4: bpf$BPF_TASK_FD_QUERY(0x19, 0x0, 0x0) 08:40:43 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000640)='cgroup.threads\x00', 0x2, 0x0) 08:40:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\b\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600"/46], 0x34}}, 0x0) 08:40:43 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000021780)={0x11, 0x3, &(0x7f000001c9c0)=@framed, &(0x7f000001ca40)='GPL\x00', 0x1ff, 0x1a, &(0x7f000001ca80)=""/26, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:40:43 executing program 2: bpf$BPF_TASK_FD_QUERY(0x17, 0x0, 0x0) 08:40:43 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x28140, 0x0) 08:40:43 executing program 0: perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:40:43 executing program 1: bpf$BPF_TASK_FD_QUERY(0x16, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 08:40:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="fc92c164ad176b807aa5b89e77e5b0942a75b190074b7a758fc250cfdd761ee1af39b6d58a58fc192922b6ff4481c81d917df8ea91f61392f6bee7d6985339cb6f6e53f18a915d1b2acfc778663f38e3fde0b5ce", 0x54}], 0x1}, 0x0) recvmsg(r1, &(0x7f000001b040)={0x0, 0x0, &(0x7f000001af80)=[{0x0}, {&(0x7f0000019dc0)=""/77, 0x4d}], 0x2}, 0x0) 08:40:43 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000001b900)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001940)=@raw=[@func], &(0x7f0000001980)='GPL\x00', 0x0, 0x1000, &(0x7f00000019c0)=""/4096, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:40:43 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000041c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xa}]}]}}, &(0x7f00000040c0)=""/193, 0x32, 0xc1, 0x1}, 0x20) 08:40:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 08:40:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400e000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600"/46], 0x34}}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}}, 0x0) r5 = syz_open_dev$vivid(&(0x7f0000000200)='/dev/video#\x00', 0x1, 0x2) fcntl$setown(r5, 0x8, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2004810) 08:40:43 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x5c) 08:40:43 executing program 3: perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:40:43 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x5c) 08:40:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000021780)={0x11, 0x7, &(0x7f000001c9c0)=@framed={{}, [@map_val, @map]}, &(0x7f000001ca40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:40:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001d00)={0xffffffffffffffff}) close(r0) 08:40:43 executing program 4: bpf$BPF_TASK_FD_QUERY(0x1e, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 08:40:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x402, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x7800, 0x7800, 0x8, 0x81, {{0x20, 0x4, 0x3, 0x24, 0x80, 0x67, 0x0, 0x7, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x27}, {[@cipso={0x86, 0x5f, 0x2, [{0x0, 0x9, "75c12d8b987673"}, {0x1, 0x8, "bf0fbf5fa293"}, {0x2, 0x7, "f57b71f1d4"}, {0x2, 0x11, "3756a23f00b7f08a65654b95aaaf6d"}, {0x5, 0x2}, {0x0, 0x5, "efe8f1"}, {0x2, 0xb, "37db5ac1dd9e3206f0"}, {0x2, 0xe, "171b1726af07772370a5cdc7"}, {0x7, 0xc, "3447cdabeb060b710055"}, {0x2, 0x4, "0cb0"}]}, @timestamp_prespec={0x44, 0xc, 0xf4, 0x3, 0x7, [{@multicast2, 0x3}]}]}}}}}) r5 = syz_open_dev$audion(&(0x7f0000000740)='/dev/audio#\x00', 0xff, 0x30100) r6 = accept4$x25(r5, &(0x7f0000000540)={0x9, @remote}, &(0x7f0000000580)=0x12, 0xc0000) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r6, 0x942e, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x94, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4e1b2808f7c8eb2b}]}, @MPTCP_PM_ATTR_ADDR={0x54}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x68, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x94}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getnexthop={0x18, 0x6a, 0x300, 0x70bd29, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x20008050) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x84, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r2, 0x400, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:43 executing program 3: r0 = socket$kcm(0x10, 0x100000000000003, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1600000016008105e00f80e045e4b37c4cb33fab463c", 0x16}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 08:40:43 executing program 1: perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:40:43 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x101200, 0x0) 08:40:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000041c0)={&(0x7f0000004040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'I'}]}}, &(0x7f00000040c0)=""/207, 0x1000000, 0xcf, 0x1}, 0x20) 08:40:44 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@map_val], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x84, &(0x7f0000000280)=""/132, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:40:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="5e86c8b3", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600"/46], 0x34}}, 0x0) 08:40:44 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz1\x00', 0x200002, 0x0) 08:40:44 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000000440)=""/164, 0x26, 0xa4, 0x1}, 0x20) 08:40:44 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x2b, 0x0, 0x70, 0x1}]}}, &(0x7f00000040c0)=""/205, 0x2a, 0xcd, 0x1}, 0x20) 08:40:44 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000041c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f00000040c0)=""/193, 0x32, 0xc1, 0x1}, 0x20) 08:40:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x109002, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8}, @val={0xc, 0x99, {0x7fff, 0x58}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004884}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x76}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x7, 0x2, 0x7, 0x3]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x24008004) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x0, 0x3, 0x6}]}, 0x34}}, 0x0) 08:40:44 executing program 3: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9b}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:40:44 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)='I', 0x1}], 0x1}, 0x200000f4) 08:40:44 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000019c0)={&(0x7f0000000680)=@qipcrtr, 0x80, &(0x7f0000001900)=[{0x0}, {0x0}], 0x2, &(0x7f0000001980)=[@txtime={{0x18}}, @txtime={{0x18}}], 0x30}, 0x0) 08:40:44 executing program 2: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000021cc0)={0x0, 0x0, 0x0, 0x0}, 0x38) 08:40:44 executing program 0: bpf$BPF_BTF_LOAD(0x14, &(0x7f00000041c0)={0x0, &(0x7f00000040c0)=""/207, 0x0, 0xcf}, 0x20) [ 937.211733][T19936] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:44 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000041c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x5}]}]}}, &(0x7f00000040c0)=""/193, 0x32, 0xc1, 0x1}, 0x20) 08:40:44 executing program 5: ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000000)={0x2, @output={0x1000, 0x1, {0xeb, 0x4}, 0x3, 0x74}}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) close(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r1, 0x400, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x10010, r1, 0x2) fcntl$setlease(r0, 0x400, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x8001, 0x3, 0x3ff0000, 0x0, 0xcd9, 0x0, 0x7ff, 0x1, 0x10001, 0x8, 0x5, 0x8, 0x80000000, 0x5, 0x6, 0x81, 0x0, 0x800000, 0x400, 0x10000, 0x1, 0x80000000, 0x0, 0x9, 0x7, 0x6, 0x7, 0x8, 0x1, 0x4, 0x2, 0x401]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b331499dc3a84466b0ea67086491fa916449210927e636fc4adeacd06825487b62567394d7ebc7914003533fffc7836c8fd88a45aba166458966c121a811e17dfe8b38ccd8cac510f08cea350d08b34659daba1b1624570e07b0df3b879515fefa0ff37b839e7b873eda2b5d8cea3bf5ea773eee4e1da3744cefa42f54b650f32ec3643ee828ea1b90545fdd4b8df64b93a994c69e6cecf3587961670464c9097bdac1ec5117a4a53bc4605e8b81084414045a0f7b56529ea8fdf7db2996d5423f56ec336ae1e30929ab89b62666d72e945f61239d920d3e5dbc8fe38c74a9504bb5f0d4c548b233060b9dec911bc8", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600"/46], 0x34}}, 0x0) 08:40:44 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}]}}, &(0x7f0000000080)=""/192, 0x32, 0xc0, 0x1}, 0x20) 08:40:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}}, 0xc) 08:40:44 executing program 0: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x20000000002, 0x73) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x32, 0x0, 0x0, &(0x7f0000000000), 0x18}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0506617, &(0x7f0000000040)=0x2) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:40:44 executing program 4: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:40:44 executing program 3: bpf$BPF_TASK_FD_QUERY(0x10, 0x0, 0x0) 08:40:44 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x0, 0x1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 08:40:44 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800810de00f80ecdb4cb9040a4425ef0b067c05e87c55a1bc000900b8000699030000000500150007008178a800050040003cc00200001203ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1, 0x0, 0x0, 0x4}, 0x0) 08:40:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001d00)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001340)={&(0x7f0000000080)=@qipcrtr, 0x80, 0x0}, 0x2041) 08:40:44 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000021780)={0x11, 0xf, &(0x7f000001c9c0)=@framed={{}, [@ldst, @map_val, @map, @ldst, @btf_id, @map_val, @btf_id]}, &(0x7f000001ca40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:40:44 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0) 08:40:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1080}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00', r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffff7e, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) bind(r5, &(0x7f0000007b40)=@vsock={0x28, 0x0, 0x2710}, 0x80) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="8100000000000000280012000900010076657468"], 0x48}}, 0x0) r7 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x300f828, [], [{}, {0x801, 0x0, 0x80000001}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000007d40)={'syztnl2\x00', &(0x7f0000007cc0)={'syztnl0\x00', r6, 0x29, 0x0, 0x9, 0x8, 0x62, @mcast1, @remote, 0x7800, 0x10, 0xcc, 0x4}}) sendmsg$nl_route(r3, &(0x7f0000007e40)={&(0x7f0000007bc0)={0x10, 0x0, 0x0, 0x2002}, 0x5, &(0x7f0000007e00)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x100, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x8208, 0xc692}}, 0x20}, 0x1, 0x0, 0x0, 0x4000884}, 0x24000000) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="676b00e68f", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES64=r5, @ANYRES16=r1, @ANYRES32, @ANYBLOB="f05b0b0dda725dba3e3643d560a88d0328c40ce26052771765437dbed691f5bcc78e3677e670d44573f5d506", @ANYBLOB="81000700", @ANYRES32=0x0, @ANYBLOB="0800030004000000", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000000) 08:40:44 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000002280)={0x0, 0x0, 0x0}, 0x0) 08:40:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$sock(r0, 0x0, 0x0) 08:40:44 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x5a7381, 0x0) [ 937.549619][T19978] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:44 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000021780)={0x0, 0x0, 0x0, &(0x7f000001ca40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:40:44 executing program 3: r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 08:40:44 executing program 4: perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:40:44 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300), 0x10) [ 937.642622][T19995] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:40:44 executing program 1: bpf$BPF_BTF_LOAD(0x15, 0x0, 0x0) 08:40:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001900)=[{0x0}, {0x0}], 0x2, &(0x7f0000001980)=[@txtime={{0x18}}, @txtime={{0x18}}], 0x30}, 0x0) 08:40:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000180)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20280440}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)={0x660, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x248, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdd}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc8, 0x5, "293cf6820e08616bacc3c6ef09d7109be66d043911b391a2c5c24a307a9b4349a03c61b5eba94604a2b28577f10087580eaf378ebd4eedd4d82fa14225c8a2ffca531b64b2aee2bf6b90ddbfb5a4565381f801f460d65d4ac968f3001da7567238f08654781cd9d4d4c99828ff9baa8ae6cfe7fb7a52c5b56cabe1765b8b77662175e8a60bed075f5aba4dcfc262cb4b14c626058b0c0fe598f888027a960ca9eab08747f3d1b18a83f53f341010b036fb032bf63877998a279d062fd0088d0bda153141"}, @ETHTOOL_A_BITSET_VALUE={0xb1, 0x4, "ee13e3f99b4953c6f1e7acd0280d7f3601defb17328041d66b82743dd5b8aeff5bb06f480f05d8a4d02a4aeefb9dfe5f0b656e3fc67337d0ae388c1d631a8025685fdb2bc1ce997918351bd8d03d131d489f1f9f1426bbadc6781dbfa6466a88ebdaa6eaca30aa2ca9115ba04b22f4f3a81d8ecb52e1fba664963312191d653660ad1572c60e7efb4e723da3065a62b13acf8efd034bb847d544c8d54f00940d6aea1651bf1ad3c528a69c5123"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x54, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "44913d6fff3f955c7538040deaa5736b187c6c22bda1ccf67f7b479ba4fca6b71c95eae68e7a0697808def9c8a0d129eb81e7108c1a06a9e53998845cacfe88e4ffe2108892ca0ee3102658344a39506cb61e5bb6ff4921dd21bd515bef312d410edebdafaa6715839c731764382c409f7be5f29e0bd0f9adbf2deb2ebed4437ef4b757d9d7b9e0fb31e28a143a69f98e9b8bd81e7f8597714c2de"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff801}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2e0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x7, 0x4, "58875f"}, @ETHTOOL_A_BITSET_VALUE={0x55, 0x4, "c92787c7b89f75045653e9d9c39d7561225254dace1239561bfa0289c8f087e7492f27395153b85677a89f6e3c50a69c9c4e89b3f82a8c818a3407aabdb9d68a8e04f8dc8e49dc518ec1491c4a7fe5d88d"}, @ETHTOOL_A_BITSET_MASK={0x98, 0x5, "9024f360703ed44824c135b48b584bdaf7aae213cd627f19a1a39eb05df72995e728d0f9532259a37342e401879b29c46b32e216ef09b45a55ad6d6703437e5bd61547a1cd672fadca4bcbd1768684060217adb4be1524e8a20e5799d396e583493840c76d97b6fd21291b005a3e8e17af13d06863aa99754cdc22d067c8c0e3bbc654977f369fa79f9fe29dadb9e4ce4f8a458b"}, @ETHTOOL_A_BITSET_VALUE={0x9, 0x4, "4bba45c759"}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '$-.$&[:{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xb2,[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}, {0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(%${\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x3d, 0x2, '\x00N9\x00\x00\xfb)\xec\x13V\xb7\xfd\x97\xad*\xb1V\xe3Z\x1a\xab\x9eL^\xda\xd9=k\xa6~\xad=<\x92y\x1f\xf5\x00\x00\x97\x90\xb2\xd3\xaa\xaa\x8a\x14\x9b\xb5M\xe8\xf1%\x15\xe3x\xed'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\\\]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_VALUE={0xd1, 0x4, "7c3089491d2658562938a13f70a52e0a48b3b61a8106b9b27bd83bcb62f859ca557a053de6356208cc1da616e5ebd924949da2493eff58c6233c3f8047987170164cd8553597795e1774d19342856141f95a1df1053a81cd29dcdf3a7e8db8073fb6812241a2012bd954242faf79c1184e817f7ef0de51a5b02ec8623493d2a99baf5c615bb14468a06039c7d6044a082a18aaeb81d9dd7f93a560122f1552aaae32c9f52a8021f9e06a05d520d89b42990c8e827916ba4f01f298d22dbed9fe526cb9f67ad6a1327afa1a6631"}]}]}, 0x660}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffff7e, &(0x7f0000000180)={0x0}}, 0x0) bind(r4, &(0x7f0000007b40)=@vsock={0x28, 0x0, 0x2710}, 0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x73) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="8100000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x300f828, [], [{}, {0x801, 0x0, 0x80000001}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000007d40)={'syztnl2\x00', &(0x7f0000007cc0)={'syztnl0\x00', r5, 0x29, 0x0, 0x9, 0x8, 0x62, @mcast1, @remote, 0x7800, 0x10, 0xcc, 0x4}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000007e40)={&(0x7f0000007bc0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000007e00)={&(0x7f0000007d80)=@newlink={0x60, 0x10, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc692}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_MAP={0x20, 0xe, {0x8, 0x396, 0x2, 0x91ee, 0x1, 0x26}}, @IFLA_NET_NS_FD={0x8, 0x1c, r6}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800008c97c50900000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x110, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7fff}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}, @ETHTOOL_A_RINGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000020000000000010000002000018006000116000a004000140004c3c1ee9f6199c02f000706ffff0000000009000000c995d622152672b1173e1a29321d3be8f9ad89fa8702bc4db584cd773c4e827199c945e4c66a12f31c4de42bb6dea5f5b6cc62871e99d5dbe65aef610b2597ecbb6c41dc6c79a0c8e02bb991c9d5fd1d9b91b19ceaf7e097f4112f21d61366e37761cc12d0e1930a0c06005430e22f25735ddd8c42faa9b95ead7e7ec818c65d0cff2633192ed223a4b08d508c5b6f15a46b80b2809bb85c44e44c4eafdea651d91c3e2028dc3fe2"], 0x34}}, 0x0) 08:40:44 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x5) [ 937.833481][T20014] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 937.875742][T20014] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:45 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000001c0)="13", &(0x7f00000002c0)='H'}, 0x48) 08:40:45 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f000001c980)={&(0x7f000001c940)='./file0\x00', 0x0, 0x8}, 0x10) 08:40:45 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000041c0)={&(0x7f0000004040)={{0xeb9f, 0x1, 0x0, 0x63, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000040c0)=""/207, 0x1a, 0xcf, 0x1}, 0x20) 08:40:45 executing program 2: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x20000000002, 0x73) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000200)=@caif=@dbg={0x25, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)="1dfb3d28e17b336c", 0x8}], 0x1}, 0x4000080) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x32, 0x0, 0x0, &(0x7f0000000000), 0x18}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0506617, &(0x7f0000000040)=0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00') 08:40:45 executing program 1: perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:40:45 executing program 5: ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x4, 0xfff, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001d00)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000040) 08:40:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x104a}, 0x40) 08:40:45 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x28, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:40:45 executing program 2: perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 08:40:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x901, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r2, 0x8, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xb7e8fbfcbd18d8f4}, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r3, 0x400, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x8001) 08:40:45 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008ec0)={0x0, 0x0, 0x8b}, 0x20) 08:40:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002080), 0x0, &(0x7f0000002100)=""/169, 0xa9}, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002240)={0x20, 0x6, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002880)={{0x14}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_SET_USERDATA={0x4}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x24, 0x18, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x801}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0xf05}], {0x14}}, 0xf0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:40:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xe, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x10) accept(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d80)='l2tp\x00', 0xffffffffffffffff) 08:40:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002080), 0x0, &(0x7f0000002100)=""/169, 0xa9}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002cc0)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002c80)={&(0x7f0000002880)={{0x14}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_USERDATA={0x4}, @NFTA_SET_DATA_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x801}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0xf05, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14}}, 0xe8}}, 0x0) 08:40:45 executing program 2: accept$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000001600)=@abs, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001f00), 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400a408}, 0x24040810) 08:40:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) accept(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d80)='l2tp\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14}, 0x14}}, 0x0) 08:40:45 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000080)={@random="03366dadf711", @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1=0xe0000002}, @timestamp_reply={0x12}}}}}, 0x0) 08:40:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 08:40:45 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x50, r1, 0x10, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="000426bd70000000000001000000140001800600010002000000060005004e240000"], 0x28}}, 0x0) 08:40:45 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x303, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1, 0x0, 0x10}}], 0xffffff1f, 0x0, 0x0) 08:40:45 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffff7e, &(0x7f0000000180)={0x0}}, 0x0) bind(r3, &(0x7f0000007b40)=@vsock={0x28, 0x0, 0x2710}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x73) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="8100000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x300f828, [], [{}, {0x801, 0x0, 0x80000001}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000007d40)={'syztnl2\x00', &(0x7f0000007cc0)={'syztnl0\x00', r4, 0x29, 0x0, 0x9, 0x8, 0x62, @mcast1, @remote, 0x7800, 0x10, 0xcc, 0x4}}) sendmsg$nl_route(r1, &(0x7f0000007e40)={&(0x7f0000007bc0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000007e00)={&(0x7f0000007d80)=@newlink={0x60, 0x10, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc692}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_MAP={0x20, 0xe, {0x8, 0x396, 0x2, 0x91ee, 0x1, 0x26}}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007ed8d5fa4a20500c50900000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x7c, 0x12, 0x2, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x8418}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xc00000}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfff}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_IFALIAS={0x14, 0x14, 'vcan0\x00'}, @IFLA_MAP={0x24, 0xe, {0x8, 0x6, 0x21f4, 0x857, 0x1, 0x5c}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x4044840) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0xd, 0xffff}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x57, 0x0) 08:40:45 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000006110ac0e0000000063012c000000000095000000b1ad19728b40b03a2dc37cb88d42f31d5b74a464ddce54009b806751dd3aa93437b91ceb68fd9c63356945ef036e96496cb4cf9b48884934698d1edb3fc6c5ab8a4e71d262761f390b68691d1224c826a9334ecc9144b7a57c66db604c1953c0908be15a2c62331637036bf7fb434d776e49743d34767a13"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 08:40:45 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000004000000085000000360000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 938.916838][T20096] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:46 executing program 1: pipe2(&(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x6}, 0xfffffd97) 08:40:46 executing program 2: pipe2(&(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x6}, 0xfffffd97) write$FUSE_POLL(r0, &(0x7f0000000140)={0x18}, 0x18) 08:40:46 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x303, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1, 0x0, 0x10}}], 0xffffff1f, 0x0, 0x0) [ 938.989960][T20092] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 939.036426][T20102] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 939.070446][T20116] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 08:40:46 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x303, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1, 0x0, 0x10}}], 0xffffff1f, 0x0, 0x0) [ 939.087555][T20096] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:46 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:46 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x303, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1, 0x0, 0x10}}], 0xffffff1f, 0x0, 0x0) 08:40:46 executing program 5: syz_usb_connect$cdc_ncm(0x4, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x2, 0x1, 0xe7, 0x10, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "b4"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xde64, 0x800, 0x1, 0x1f}, {0x6, 0x24, 0x1a, 0x1ff, 0x1}, [@dmm={0x7, 0x24, 0x14, 0xff, 0x7fff}, @obex={0x5, 0x24, 0x15, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x2, 0xa5, 0x1f, 0x5, 0x800, 0x8d}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x1, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xe0, 0x7, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x63, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x40, 0xe0, 0x8}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xc0, 0x1f, 0x3, 0xff, 0x7}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x438}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xfffffffffffffdd8, &(0x7f0000000440)={&(0x7f0000000140)={0x14, r1, 0x300, 0x0, 0x2}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008008) 08:40:46 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:46 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x6}, 0xfffffd97) write$FUSE_ATTR(r0, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) 08:40:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$FUSE_CREATE_OPEN(r0, 0x0, 0x3c) 08:40:46 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:46 executing program 3: pipe2(&(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000000)={0x6}, 0xfffffd97) write$FUSE_STATFS(r1, &(0x7f00000000c0)={0x60}, 0x60) pipe2(&(0x7f0000000040), 0x180800) write$FUSE_OPEN(r1, &(0x7f0000000240)={0x20}, 0x20) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) 08:40:46 executing program 1: pipe2(&(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18}, 0x0) 08:40:46 executing program 2: pipe2(&(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x6}, 0xfffffd97) write$FUSE_ATTR(r0, &(0x7f0000002200)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x78) 08:40:46 executing program 0: pipe2(&(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000000)={0x6}, 0xfffffd97) write$FUSE_STATFS(r1, &(0x7f00000000c0)={0x60}, 0x60) write$FUSE_OPEN(r1, &(0x7f0000000240)={0x20, 0x0, 0x0, {0x0, 0xa}}, 0x20) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 08:40:46 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00)='mptcp_pm\x00', 0xffffffffffffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x14200, 0xeb) fcntl$setlease(r2, 0x400, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x52) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1000000000000000000001000000380001800500020000000000060001000a000000080006000300000014000400fc02000000000000000000000000000008000700", @ANYRES32=0x0, @ANYBLOB="5f60efd772649cd13d8225eeec32ec0517c616f70218fb8ad6a203bedf55355bf8a4300966462395f01ae45a122519759a2f43833e0315d82e0e66a398b772383889548f3f9801a1634d648f5aa55760f472cec0f19798c74e0602afab52ec325b5f37be4b675af9197318285b74e7265f1541e8aa65c559cd924af1f9efe30bc30e6d44"], 0x4c}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r4, 0x40184152, &(0x7f0000000b80)={0x0, &(0x7f0000000b40)=[&(0x7f0000000680)="13d4509d4138715ac8fe72549650503a6c945f41bc09c7f83c10a07d14f0d5d8b5901d68110f49a86bf8d5c860accac505b7536a79196a15", &(0x7f0000000740)="075fa5650a80782a5ca051c6f3289a24bfdb3d5fce7e25ac7cf76e5e9c6ce27b9efc38376d1539940010d62642d814db6fe90ec1638730615ba32049339c917ae8fb7bf05914ad7a95d9c784b249421d3ef03faa38ebdf2a166751b156a857a97f595dcf0fdf7634dd3cff13e13b26bb91185c6d77266f52b17968bba8a952af5ab523c9a9f653d1405749008bcf2d4dea7ae2d0cd491f4864d8e42a2759991a4860965b0703f0867751628f799a2e70e6f7d9b5bf30d4a7812163498c845e5de53238e45c", &(0x7f0000000840)="ab999346b583e87e3173ce3bbfc52b0f69ee59431a5f938a09868ca26ab3252749b7a8165cf3f1992bac10c981de67341c50302705e1ff7d841ca3a5c5321c79e9ba5def5fa45dda87b89fcd1e17eddb9fe75a3d9fe47cd865dea4908960c8875e01df8dfa9449501ca2", &(0x7f00000006c0)="e4a8f54c798fb6a51caa62b980b5ffb30a2cce0b74efd3a389f8d5114dcfd5", &(0x7f00000008c0)="4a5adfdc4f2b2e776dfde86bdf530ff8554d74c991cffedf393131e6107c7b68329d74aa5118e7b4d312097fd03b7e12929cfa9c8cdf055a87ab47dfbdffff08a4e0f53f1184f7cedb329634015b16b36200c20e", &(0x7f0000000940)="65059e83e74869bdaff6ba92aeb5ddc7d45fa274a6cb408e24a73be8450203110ce943178b8472708e5aed0c2dbb3da822b07c81516c9f33f8e3", &(0x7f0000000980)="9c0aa6610060f439443f680e40085ace6d26329439cd6e4d7cc09fbb8786e44d74cf25183944c02ee45d4a4cf78fd1d7b55fa87d442c6b30d7e0f3678a1cd758b4059d57d06fb52edffc1dbf094468c8d8ca0a34c6640d772c5fb00110065bc238219df173c3654b7a056a5d964725df04bd0e4eff34b7b2d9559ad3b0ebaca6d077c65237493b48395e78bb744cbcd266feb2797e3569685326b6106943739aec2a2dc324bd21cbe2586cdf6d36bc43d028717f4382273839d1ad7a9e7ea87af15ac7140ccb71416ded3a41cac95173651be0e4e45ffb53f728dff18d32b9a58f", &(0x7f0000000a80)="6677ffe21ef1b0e1d621a3a3edab56c0679f67e1347bc642ceb2360db88a6af50c2a5e511eb6be7b5dbcfc3d09f6a4c0aa61f74f404830ef85926ae9480755a27a30a6230dad95463da9ea2edaf82e83fe6b7da58bfc7bb4f79123178c384827afb7faa7ef9c0c03d179751a731399286056fb589893224509c1ec7f25ccbba4607374"], 0x200}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0xb8, 0x0, 0x8, 0x501, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x4002}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x103}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xaf9}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x40000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xf800}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0xb8}}, 0x1050) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000ed7466c088a9352a218d19513b3cd951d05f0e9b583f5d5feb415ff4531b27e52c53efeca1ec2197092a441b0a05becd232ce2e257b4948fa57800000091d7cef0ed9b6a6089b3d7bc35fd943b54a4721326f7bdaa0e8ec63561cde3ea76863572d6b4", @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, r3, 0xf96, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x69, 0x2a}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000001) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac5723245cb134bced2a99786673ce063400b4e7", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600"/46], 0x34}}, 0x0) 08:40:46 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20}, 0xfffffcf3) write$FUSE_GETXATTR(r0, &(0x7f0000000080)={0x18}, 0x18) 08:40:47 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:47 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:47 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) read$char_usb(r0, &(0x7f0000006d80)=""/66, 0x42) 08:40:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020029bd7000000000000100000020000180060001000a00000014000400fc060000000000000000000098328583"], 0x34}}, 0x0) 08:40:47 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 08:40:47 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 08:40:47 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 08:40:47 executing program 2: pipe2(&(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x6}, 0xfffffd97) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50}, 0x50) 08:40:47 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000080)={0x18}, 0x18) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x6) 08:40:47 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r0, 0x400, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getnexthop={0x20, 0x6a, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000886) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:47 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 08:40:47 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) 08:40:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 08:40:47 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 08:40:47 executing program 3: pipe2(&(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x6}, 0xfffffd97) write$FUSE_IOCTL(r0, &(0x7f0000000080)={0x20}, 0x20) 08:40:47 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r0, 0x0) 08:40:47 executing program 0: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') r1 = fcntl$getown(r0, 0x9) prlimit64(r1, 0x0, 0x0, 0x0) 08:40:47 executing program 1: socketpair(0x8, 0x0, 0x0, &(0x7f0000000540)) 08:40:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', r0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r2 = open(&(0x7f0000000540)='./file0/file0\x00', 0x102440, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000001c0)=ANY=[@ANYBLOB="0900000000000066d331e1d407d3b10000"]) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="c2b7f5a67ba3595aadbe977dc1fe140ec0b702b4ead095d0b0420a9aebcd76fa1509ae0a223fbdc4abecdc87ca69482cc7d9ab4af42a5cda4a65d4fa813425f0910e5795483e92c6bef60d704a8c0356c82625085fc5a490b5d42a9454c1cda628f3aea85b6ba77c239d548f9e9e94353c7ce4b3cf0fa9b99aeeca890b31a9dc1fbf49c527b22e000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x40000) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000000)=0x360, 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x4000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x4, 0x30, 0x5, 0x1, 0x54, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000, 0x40, 0x800, 0x6}}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getqdisc={0x34, 0x26, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0x6}, {0xd, 0x9}, {0xa, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x80010) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r8, 0x400, 0x0) poll(&(0x7f00000005c0)=[{r0, 0x6400}, {0xffffffffffffffff, 0x52}, {0xffffffffffffffff, 0x40}, {r3, 0xc0}, {0xffffffffffffffff, 0x8}, {r6, 0x3000}, {r7, 0x9010}, {r8, 0x4}], 0x8, 0x2) 08:40:48 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 08:40:48 executing program 1: r0 = fork() r1 = fork() rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffe00}) 08:40:48 executing program 0: sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 08:40:48 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r1 = socket(0x1, 0x0, 0xfffffff7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r0, 0x1, 0x70bd2c, 0x1, {}, [@MPTCP_PM_ATTR_ADDR]}, 0x34}}, 0x0) 08:40:48 executing program 2: io_setup(0xe797, &(0x7f0000000140)) 08:40:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x0, 0x20}, 0x80, 0x0}}], 0x1, 0x0) 08:40:48 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 08:40:48 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='!].\x00'}, 0x30) fork() 08:40:48 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000280)={0x9, "f798a475ed06e4f109df3faf43af11aa1c1261ba953fa854a574763324a43197", 0x3, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r3, 0x400, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600000000000000000000001b00006a89a95e132e99b03b4b986ef3a8f07cf69097daf72abfe7b74c36a4908d85cd806ef8b2ff58bca5501282ad41f26ed710421b00f090d1d21415ba88376f509a7ef1bc2787c31ada51ddf4232d3ffaba9b82d919c8035cd1ecf648bca6be45942b50923b21d33b60bb41623c4fde5a3d0d3d495553d6b1b36f291cd30667acd6627e266d228fabf796"], 0x34}}, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x5) getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f0000000080)=""/74, &(0x7f0000000180)=0x4a) 08:40:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:40:48 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f0000000480)) 08:40:48 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000680)='./bus/file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000440)=@v3={0x3000000, [], r0}, 0x18, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0) 08:40:48 executing program 1: syz_mount_image$v7(&(0x7f0000001000)='v7\x00', &(0x7f0000001040)='./file0\x00', 0x0, 0x4, &(0x7f0000001480)=[{&(0x7f0000001080), 0x0, 0x4}, {0x0}, {&(0x7f0000001340)="b0fcb63b60c7c46f37c72c80d2af19170833981adb6fc8de2bfbe5f7cec72cf80444d095056124221509b179bb95957767fe38c2239db058530230df1227d782f86009658797", 0x46}, {&(0x7f00000013c0)="09021b8ee2534195762e6fa5cc072b21985aa31e3cfa47887938af797987ee4e5916578bf52ff195c52135002b30368f3f411cc93915d98b5725816c77ef995a410d50eca0b79cc0", 0x48, 0x401}], 0x801, &(0x7f0000001540)={[{'@&'}, {']\xde})-'}, {':/)-&[-,['}, {'(]-\'&'}, {}], [{@obj_type={'obj_type', 0x3d, '+*\xc6:$'}}, {@obj_user={'obj_user'}}]}) 08:40:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}}, 0x0) 08:40:48 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0xe902, 0x0) 08:40:48 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0)='NLBL_CIPSOv4\x00', r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x38, r2, 0xc01, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}]}]}]}, 0x38}}, 0x0) [ 941.925556][T20281] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 941.963867][T20286] loop1: detected capacity change from 0 to 4 08:40:49 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000) [ 941.987766][T20281] overlayfs: failed to resolve 'file0zþ3': -2 [ 941.988316][T20294] overlayfs: filesystem on './bus' not supported as upperdir [ 942.002064][T20286] VFS: Found a V7 FS (block size = 512) on device loop1 08:40:49 executing program 2: accept4(0xffffffffffffffff, 0x0, 0x0, 0x180800) 08:40:49 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 08:40:49 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000002840)={&(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, 0x0}, 0x0) 08:40:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @mss, @sack_perm, @window], 0x4) 08:40:49 executing program 1: remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x0, 0x0) 08:40:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r2, 0x400, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x2ad4, 0x0, 0x1612a27c05b52da2, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b='\xb0\x80s\xe8\xd4N\x91\xe3\xda\x92,\"C\x82D\xbb\x88\\i\xe2i\xc8\xe9\xd85\xb1\x14):M\xdcn'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a='\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}, @WGDEVICE_A_PEERS={0x1840, 0x8, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8000, @loopback, 0x9}}]}, {0x43c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a1798ebb49998affdcfd386445348556bf2bfb60e9a9ae133330e4d166869e59"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "53dab3f2e17dbb93e0e330ed2e17a40af1e1d85904aad7c5292654d12e4b054a"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "77942299b170314952b646b4a8bde97633fd5ff8b8cfd2860af4d86cef761f62"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x37c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x80}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x13}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}, {0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "829c47fcde6583a70b2ace4fb8f8c18eb40a477179ba51d927e9846c3b15a572"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r2, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}}, 0x0) 08:40:50 executing program 1: r0 = socket(0x23, 0x2, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:40:50 executing program 0: bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100), 0x4) 08:40:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x20c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0xeec}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x100000001}, {0xc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x9}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0xffffffffffffff7f}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x4d}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3f6d}, {0xc, 0x90, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x800}, {0xc, 0x90, 0x7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1f}, {0xc, 0x90, 0x40}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x48000}, 0x40041) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x34}}, 0x4) 08:40:50 executing program 4: vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000000, 0x0) 08:40:50 executing program 0: mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 08:40:50 executing program 1: syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x2fe, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00', 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) syz_mount_image$minix(&(0x7f0000000c40)='minix\x00', &(0x7f0000000c80)='./file0\x00', 0x0, 0x1, &(0x7f0000000d80)=[{0x0}], 0xa80d4, &(0x7f0000012e00)={[{'/dev/input/mouse#\x00'}]}) 08:40:50 executing program 4: vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000000, 0x0) 08:40:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffff7e, &(0x7f0000000180)={0x0}}, 0x0) bind(r5, &(0x7f0000007b40)=@vsock={0x28, 0x0, 0x2710}, 0x80) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x73) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="8100000000000000280012000900010076657468"], 0x48}}, 0x0) r7 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x0, 0x300f828, [], [{}, {0x801, 0x0, 0x80000001}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000007d40)={'syztnl2\x00', &(0x7f0000007cc0)={'syztnl0\x00', r6, 0x29, 0x0, 0x9, 0x8, 0x62, @mcast1, @remote, 0x7800, 0x10, 0xcc, 0x4}}) sendmsg$nl_route(r3, &(0x7f0000007e40)={&(0x7f0000007bc0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000007e00)={&(0x7f0000007d80)=@newlink={0x60, 0x10, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc692}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_MAP={0x20, 0xe, {0x8, 0x396, 0x2, 0x91ee, 0x1, 0x26}}, @IFLA_NET_NS_FD={0x8, 0x1c, r7}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007ed8d5fa4a20500c50900000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @multicast2}, &(0x7f0000000080)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x8085) 08:40:50 executing program 2: userfaultfd(0xc0000) 08:40:50 executing program 4: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000000, 0x0) [ 943.703967][T20391] __nla_validate_parse: 4 callbacks suppressed [ 943.703980][T20391] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 943.805560][T20409] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:51 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000002840)={&(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, 0x0}, 0x0) 08:40:51 executing program 0: sched_setscheduler(0x0, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) 08:40:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x3, 0x0, "68bf814482fdc2c91f7e04aed0e8bdedd4ba715291abaa7859cd3782c8ee990bab28f479a3a8d89335155dbcffcd4cb7a2605347dbfbea54575531800da1d5697db4e9cb9ff9d3e12f22cf5302bf658c"}, 0xd8) 08:40:51 executing program 2: syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x2fe, 0x0) 08:40:51 executing program 4: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000000, 0x0) 08:40:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r2, 0x400, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010003000000fddbdf250100000020fc0600000000000000000000000000007f2c5fdb8360c5b8000000000000006234c312af"], 0x34}}, 0x0) [ 944.461663][T20421] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 08:40:51 executing program 0: shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) 08:40:51 executing program 2: r0 = getpid() sched_rr_get_interval(r0, 0x0) 08:40:51 executing program 1: ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x0, 'syz1\x00', @bcast, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) unshare(0x60000000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000016c0), &(0x7f0000001700)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f00000002c0)) 08:40:51 executing program 4: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000000, 0x0) 08:40:51 executing program 0: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 08:40:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000ed5151933fe125df34a0000", @ANYRES16=r1, @ANYBLOB="0143ed2040adcfb78b5c000000000000000000010095eb20000180060001000a00000014000400fc0600"/55], 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00', 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x40000) [ 944.669444][T20444] IPVS: ftp: loaded support on port[0] = 21 08:40:52 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000002840)={&(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, 0x0}, 0x0) 08:40:52 executing program 2: ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, 0x0) 08:40:52 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 08:40:52 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffcfd) 08:40:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r2, 0x400, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r1, 0x200, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x4b}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4c010}, 0x60) 08:40:52 executing program 1: syz_mount_image$minix(0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), 0x0, 0x0) 08:40:52 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) 08:40:52 executing program 2: unshare(0x18000800) 08:40:52 executing program 5: ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x6f88bf80279ebbbe, 0x0, [0x2, 0x20, 0xfffffffffffff14d, 0x7fff, 0x5, 0x0, 0x3, 0x5]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000000000000000000000000000000000000000100000000000"], 0x34}}, 0x0) 08:40:52 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000200)) 08:40:52 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, 0x0, 0x0) 08:40:52 executing program 1: getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x40000102) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000001900)) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000003b00)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000003bc0)=0xed, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$MAP_CREATE(0x0, 0x0, 0x0) 08:40:53 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 08:40:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="fb060000a7ae4e5a745e8c3a6250e9412f773d8c7cc6c6954cf817c0a9ec0401aa9b68e13829f9c50f83657d4e7e4f2efb54847df814f26ba88f9f67598496dda7f720035eb46435dca9ddbea88e4ea78524339899b6f31619d61fa7dd7761c143decfa077a787d24453b4528e46793f644e2ce1fa0f8b01e710912906e4f6696d693ee6748dac0cd90987067a85", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600"/46], 0x34}}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0xf8, 0x0, 0x8, 0x501, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xaf9}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7132}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x62a}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0xf8}}, 0x1050) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000ed7466c088a9352a218d19513b3cd951d05f0e9b583f5d5feb415ff4531b27e52c53efeca1ec2197092a441b0a05becd232ce2e257b4948fa57800000091d7cef0ed9b6a6089b3d7bc35fd943b54a4721326f7bdaa0e8ec63561cde3ea76863572d6b4", @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x804) 08:40:53 executing program 0: getgroups(0x1, &(0x7f00000001c0)=[0xee00]) 08:40:53 executing program 2: socketpair(0x39, 0x0, 0x0, 0x0) 08:40:53 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, &(0x7f0000001b40)) 08:40:53 executing program 3: pipe2(&(0x7f0000000c00), 0x0) 08:40:53 executing program 2: unshare(0x4020a00) 08:40:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x0, 0x2d}}}}}, 0x28}}, 0x0) 08:40:53 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r1, 0x400, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:53 executing program 0: syz_mount_image$minix(&(0x7f0000000c40)='minix\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000012e00)) 08:40:53 executing program 3: syz_mount_image$minix(0x0, &(0x7f0000000c80)='./file0\x00', 0x0, 0x2, &(0x7f0000000d80)=[{&(0x7f0000000cc0)="4c962957088c044dae50fd98413656980c2cc9372a424660c00ed7053bfda3f0aa672deca8e0a2f76c5666b311382e0c3e6f103b4a5c57a58b0c9b57cccfabb67d878249bbdd83c2d422c30678ed1500676cbd34cf8309ed", 0x58, 0x3}, {0x0}], 0x0, 0x0) 08:40:53 executing program 3: syz_open_dev$dri(&(0x7f0000001940)='/dev/dri/card#\x00', 0x6, 0x0) 08:40:54 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 08:40:54 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) 08:40:54 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) 08:40:54 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x101) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)) 08:40:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8) 08:40:54 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000002a40)={'ipvlan0\x00', @ifru_hwaddr=@dev}) 08:40:54 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0x6, 0x6, 0xfff, 0x20, @private1={0xfc, 0x1, [], 0x1}, @mcast1, 0x8000, 0x20, 0x1000, 0x68}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc7ddbdc", @ANYRES16=r0, @ANYBLOB="04002abd7000fcdbdf2506000000040001806c000180080003000300000014000200626f6e64300000000000000000000000140002006e657464657673696d300000000000001400020076657468315f766972745f77696669001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000005800018008000100e62918de3e35cb2bd28d46b3f94c12431599e351e1adbad82bfbe2ab2878195b96f9642a1033b647aa4882ca06e7a4aea686ee96c8ed4f47cda42dc8f7e570de2d569fed138e1ae6b4f6d91e6e5eecb5f08a61c9eb878a203ea9581de0ccf98d373469ed9a9fac640932367b4ceb2290546e35c50c859a8956fe4f48c82c382a275d46301df99ad14f35501aa2d169648646680fee24eee92a13fe", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020073697430000000000000000000000000140002006e657464657673696d30000000000000140002006d61637674617030000000000000000008000100", @ANYRES32=r1, @ANYBLOB], 0xdc}}, 0x8c0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000080010108000020000180060001000a00000014000400fc060000000000000000000000000000cdca3cd87a4821626ebaeb4b0e1c32cac28c7668111d9a2a2dc16a82b9e045c0a7cee9e9294afad90c1ecf644c1ba1dd5ebc7757528c4bef"], 0x34}}, 0x2000003) 08:40:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_vs\x00') perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/101, 0x65}], 0x1, 0x8000, 0x0) 08:40:54 executing program 1: shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) 08:40:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001480)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "31f11ad8"}, 0x0, 0x0, @userptr}) 08:40:54 executing program 2: sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:40:55 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:55 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r0, 0x400, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x2, 0x7f) r1 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) open(&(0x7f00000000c0)='./file0\x00', 0x501000, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) 08:40:55 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x1, 0x0) 08:40:55 executing program 1: pipe2(&(0x7f0000000ec0)={0xffffffffffffffff}, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, 0x0) 08:40:55 executing program 2: mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xff) 08:40:55 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) 08:40:55 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10140, 0x0) 08:40:55 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0)='NLBL_CIPSOv4\x00', r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x38, r2, 0xc01, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0x38}}, 0x0) 08:40:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8001}], 0x1c) 08:40:55 executing program 0: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 08:40:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="22b7dff2", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600"/46], 0x34}}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0xf8, 0x0, 0x8, 0x501, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xaf9}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7132}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x62a}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0xf8}}, 0x1050) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000ed7466c088a9352a218d19513b3cd951d05f0e9b583f5d5feb415ff4531b27e52c53efeca1ec2197092a441b0a05becd232ce2e257b4948fa57800000091d7cef0ed9b6a6089b3d7bc35fd943b54a4721326f7bdaa0e8ec63561cde3ea76863572d6b4", @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x1c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x11) r7 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r7, 0x400, 0x0) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40100) 08:40:55 executing program 1: syz_mount_image$minix(0x0, 0x0, 0x0, 0x2, &(0x7f0000000d80)=[{&(0x7f0000000cc0)='L', 0x1}, {&(0x7f0000010e00)="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", 0x1000, 0x1}], 0x0, 0x0) 08:40:55 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:55 executing program 3: syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x0, 0x200) 08:40:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 08:40:55 executing program 2: mount(&(0x7f000000b600)=@nullb='/dev/nullb0\x00', 0x0, 0x0, 0x0, 0x0) 08:40:55 executing program 0: signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) 08:40:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xfffffffd}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) 08:40:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000020000180060001000a00000014000400fc0600000000000000000000000000009be125c8a47c3f1cb03d3bc63996f2e712d7e0abcc"], 0x34}}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', r2) 08:40:55 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) timerfd_create(0x1, 0x0) 08:40:55 executing program 3: utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0xea60}}, 0x0) [ 948.381649][T20637] loop1: detected capacity change from 0 to 8 08:40:55 executing program 3: openat2(0xffffffffffffffff, 0x0, &(0x7f000000b5c0)={0x0, 0x0, 0x1a}, 0x18) 08:40:55 executing program 0: creat(&(0x7f0000009a80)='./file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f000000a040)='./file0\x00', &(0x7f000000a080)='trusted.overlay.origin\x00', &(0x7f000000a0c0)='y\x00', 0x2, 0x0) [ 948.504177][T20637] loop1: detected capacity change from 0 to 8 08:40:55 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x1, 0x2000, &(0x7f0000003a40)={0x0, 0x3938700}) 08:40:56 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:56 executing program 2: connect$can_j1939(0xffffffffffffffff, &(0x7f0000002740)={0x1d, 0x0, 0x1, {0x2}}, 0x18) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_usbip_server_init(0x1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x4, 0x0) 08:40:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x200040d1}, 0x0) 08:40:56 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cachefiles\x00', 0xa00000, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, 0x0, 0x0) 08:40:56 executing program 0: creat(&(0x7f0000009a80)='./file0\x00', 0x0) mount(0x0, &(0x7f000000b640)='./file0\x00', 0x0, 0x0, 0x0) 08:40:56 executing program 1: recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0xe0962bdde73a240c) 08:40:56 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002400)='/proc/capi/capi20\x00', 0x410000, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002580)={'ip6_vti0\x00', &(0x7f0000002500)={'ip6tnl0\x00', 0x0, 0x4, 0x3f, 0x40, 0x9, 0x78, @private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, 0x1, 0x1, 0x81, 0x20}}) syz_genetlink_get_family_id$l2tp(&(0x7f00000027c0)='l2tp\x00', r0) syz_usbip_server_init(0x1) 08:40:56 executing program 3: connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) 08:40:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00', r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1a970000", @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf250500000028000180060001000200000005000200a300000014000400fe880000000000000000000000000001"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x820d8dcb1f64a4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000040000000100000020002190f3da01000a00000014000400fc281ea1b6756b2de3c7060000000000"], 0x34}}, 0x0) [ 949.251094][T20686] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 949.257649][T20686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 949.265194][T20690] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 949.271709][T20690] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) 08:40:56 executing program 0: r0 = syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2000, @fd=r3, 0x3b48, 0x0, 0x0, 0x2}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1, 0x0, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) 08:40:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0xfffffe0d) [ 949.307976][T20692] vhci_hcd: connection closed [ 949.308155][ T5499] vhci_hcd: stop threads [ 949.317805][ T5499] vhci_hcd: release socket [ 949.346755][ T5499] vhci_hcd: disconnect device 08:40:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffff7e, &(0x7f0000000180)={0x0}}, 0x0) bind(r4, &(0x7f0000007b40)=@vsock={0x28, 0x0, 0x2710}, 0x80) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x73) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="8100000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x300f828, [], [{}, {0x801, 0x0, 0x80000001}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000007d40)={'syztnl2\x00', &(0x7f0000007cc0)={'syztnl0\x00', r5, 0x29, 0x0, 0x9, 0x8, 0x62, @mcast1, @remote, 0x7800, 0x10, 0xcc, 0x4}}) sendmsg$nl_route(r2, &(0x7f0000007e40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000007e00)={&(0x7f00000008c0)=@newlink={0xa0, 0x10, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc693}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x101}, @IFLA_MAP={0x24, 0xe, {0x8, 0x396, 0x7, 0x2, 0x2, 0x26}}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MTU={0x8, 0x4, 0x2}, @IFLA_PHYS_SWITCH_ID={0x22, 0x24, "cc6472fdc8cd3673cceef10ccdfa486f12cacf8fedd63456c90eda636f2b"}, @IFLA_LINKMODE={0x5, 0x11, 0x81}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007ed8d5fa4a20500c50900000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080005"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x80, 0xd6, 0x12, @rand_addr=' \x01\x00', @local, 0x40, 0x700, 0x0, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x8000, 0x8000, 0x0, 0x8, {{0x2c, 0x4, 0x3, 0x2f, 0xb0, 0x67, 0x0, 0xfb, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101, {[@cipso={0x86, 0x30, 0xffffffffffffffff, [{0x0, 0xa, "f4f85d3e5d07e873"}, {0x7, 0x5, "8562f0"}, {0x7, 0x5, "82214e"}, {0x2, 0xc, "8346304296394e85f6f0"}, {0x5, 0xa, "a1cba83e80bc544a"}]}, @rr={0x7, 0x3, 0x13}, @cipso={0x86, 0x41, 0x3, [{0x7, 0xe, "51512a463a0f8e2c827a471e"}, {0x6, 0x11, "43946c598ba993327f5bc1e712109c"}, {0x6, 0xf, "dc7bb4cc9ef7ef18409c30080c"}, {0x1, 0xd, "3a6a9d22bff9a3ec42d4bf"}]}, @ssrr={0x89, 0x3, 0x8b}, @timestamp_addr={0x44, 0x24, 0x7b, 0x1, 0x5, [{@private=0xa010101, 0x10001}, {@multicast1, 0x2}, {@private=0xa010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x101}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0xff, 0xffffec2a, 0x53, @private0={0xfc, 0x0, [], 0x1}, @loopback, 0x10, 0x7800, 0xfffffffb, 0x3}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x128, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x722ce7667ec2fd20}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40005}, 0x8040) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) [ 949.386308][T20693] vhci_hcd: connection closed [ 949.386520][ T1427] vhci_hcd: stop threads [ 949.386528][ T1427] vhci_hcd: release socket [ 949.386535][ T1427] vhci_hcd: disconnect device [ 949.429271][T20713] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 949.499403][T20725] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 949.910857][T20701] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(3) [ 949.910881][T20701] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 949.911968][T20736] vhci_hcd: connection closed [ 949.932477][ T1427] vhci_hcd: stop threads [ 949.932487][ T1427] vhci_hcd: release socket [ 949.932493][ T1427] vhci_hcd: disconnect device 08:40:57 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}], 0x1, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:57 executing program 0: select(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x9}, &(0x7f00000000c0)) 08:40:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5080}, 0x800) 08:40:57 executing program 1: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x200040) 08:40:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:40:57 executing program 0: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002400)='/proc/capi/capi20\x00', 0x0, 0x0) 08:40:57 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}], 0x1, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 08:40:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:40:57 executing program 0: syz_open_dev$vcsa(&(0x7f0000009e00)='/dev/vcsa#\x00', 0x5, 0x10402) 08:40:57 executing program 3: sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x8080) connect$can_j1939(0xffffffffffffffff, &(0x7f0000002740)={0x1d, 0x0, 0x1, {0x2, 0xf0, 0x3}, 0x1}, 0x18) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000027c0)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x2c, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x404c000) syz_usbip_server_init(0x1) 08:40:57 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}], 0x1, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:57 executing program 1: r0 = creat(&(0x7f0000009a80)='./file0\x00', 0x0) openat2(r0, &(0x7f000000a100)='./file0\x00', &(0x7f000000a140), 0x18) 08:40:57 executing program 0: creat(&(0x7f0000009a80)='./file0\x00', 0x0) open$dir(&(0x7f000000b540)='./file0\x00', 0x0, 0x0) 08:40:57 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00', r1) r3 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r3, 0x400, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000440)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd83}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x81) fcntl$setlease(r1, 0x400, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x34, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, r5, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4090}, 0x4) 08:40:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:40:57 executing program 1: getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) 08:40:57 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {0x0}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) [ 950.415258][ T36] audit: type=1804 audit(1615797657.425:242): pid=20778 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir161894903/syzkaller.KW17cM/4016/file0" dev="sda1" ino=14466 res=1 errno=0 [ 950.459101][T20777] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) 08:40:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:40:57 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002400)='/proc/capi/capi20\x00', 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000002740), 0x18) 08:40:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x180, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00', r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000a543799ae1cd8c609de817efd927c65ae83d961705293fbb38fa9c2684327315d0657836dba89c82c74cf383ef0045d55f06a4e8f2a629781e9c8ad6a680520112ebd440d0ea0256b6b6d28d6eb780ac06477e745e0d79e6f3174cb0e9186b884194eeca", @ANYRES16=r1, @ANYBLOB="00042bbd7000ffdbdf250100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40004) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\r\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0003000000010001000400f9920000000000"], 0x18}}, 0x40000) r3 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r3, 0x400, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00', r3) [ 950.465674][T20777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) 08:40:57 executing program 1: creat(&(0x7f0000009a80)='./file0\x00', 0x0) mount(&(0x7f000000b600)=@nullb='/dev/nullb0\x00', &(0x7f000000b640)='./file0\x00', 0x0, 0x102004, 0x0) [ 950.529235][T20782] vhci_hcd: connection closed [ 950.529378][ T1427] vhci_hcd: stop threads [ 950.538832][ T1427] vhci_hcd: release socket [ 950.562337][ T1427] vhci_hcd: disconnect device 08:40:58 executing program 3: r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)={0xc00c1}, 0x18) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 08:40:58 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {0x0}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:58 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@getpolicy={0x140, 0x15, 0x0, 0x0, 0x0, {{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x4e23}}, [@algo_comp={0xef, 0x3, {{'deflate\x00'}, 0x538, "c6c7297ff766cc431e56c607f109409e9f899023b77fcad5f33e8bb45ffeb757a719abc93c3bd5626cf44aa632f0b72c81313f3856c4d69a7e43b1c9f14f99618b29f4da7c793da7fc9324264830dae472f7139f1cf8d5e5803579852d129cd87e87db022b2a9764eeb95497cd4cf004c1173d2e4d624acc25ec1e89369c50b10f0e20a11464faa33dd0663d820a58c657b8b2eda63a9aae17930aee95b7b089738d1ff49f1aa3"}}]}, 0x140}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=ANY=[@ANYBLOB="88040000", @ANYRES16=r0, @ANYBLOB="010025bd7000fe9bdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e006604330080280300080211000001080211"], 0x488}}, 0x0) 08:40:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:40:58 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) 08:40:58 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000009e00)='/dev/vcsa#\x00', 0x5, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 951.031335][T20806] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(3) [ 951.037992][T20806] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 951.050821][T20807] vhci_hcd: connection closed [ 951.051212][ T5499] vhci_hcd: stop threads [ 951.075390][ T5499] vhci_hcd: release socket [ 951.092876][ T5499] vhci_hcd: disconnect device 08:40:58 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002400)='/proc/capi/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000027c0)='l2tp\x00', r0) 08:40:58 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {0x0}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:58 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 08:40:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:40:58 executing program 5: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000600)='/dev/btrfs-control\x00', 0x58001, 0x0) 08:40:58 executing program 1: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) 08:40:58 executing program 0: syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x100000000, 0x301402) 08:40:58 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:58 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x00\x00\x00\x00\xa1\xa2\xe0g\x98', 0x4) fallocate(r0, 0x3, 0x0, 0xffffffff) 08:40:58 executing program 1: shmat(0x0, &(0x7f0000ff6000/0x3000)=nil, 0x0) 08:40:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:40:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) 08:40:58 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x3932, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x8001}, 0x0, 0x1, 0xffffffffffffffff, 0x13) perf_event_open(0x0, r1, 0x8, 0xffffffffffffffff, 0x0) 08:40:58 executing program 0: shmat(0x0, &(0x7f0000ff6000/0x3000)=nil, 0x4000) mremap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 08:40:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:40:58 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:58 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x309) 08:40:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000100)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x39) 08:40:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:40:58 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x240a9182143a2e04}, 0x40c0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0xc492, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) clock_gettime(0x3, &(0x7f00000000c0)) clock_settime(0x0, &(0x7f0000000400)={0x77359400}) clone(0x80000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) timer_getoverrun(0x0) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="73797a309c6383573ecb710e2ef2188169e4fe630cb4f0361e3444c425bc08feff78f0acb3f659c941ec3013630c00002e5d8fbb7a6f0000000000100006486f79c20000000000"], 0x4e) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x4c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}}, 0x20040014) poll(0x0, 0x0, 0x8000000000000200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r1, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) 08:40:58 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:58 executing program 5: statx(0xffffffffffffff9c, 0x0, 0x1000, 0x0, 0x0) [ 951.624742][T20868] ptrace attach of "/root/syz-executor.1"[20866] was attempted by "/root/syz-executor.1"[20868] 08:40:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:40:58 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 08:40:59 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000140)="120000001600e70d017b00000000", 0xe, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x5, 0x20, 0x0, 0x3, 0x0, 0xffffffffffffe1af, 0xc008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x8e1, 0x5}, 0x10, 0x6, 0x10001, 0x7, 0x40, 0x8, 0x101}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) recvmmsg(r1, &(0x7f0000004e00), 0x27b, 0x0, 0x0) write(r1, &(0x7f0000000040)="3bf6f00f98e79070744e30737c406b4f78d9cf462d6ac3fbfa0804fbdced9dc4f32573cbb578ccffc88a0bdc254e1114ea565f78c1bf89501cf8c1c8844a4228388c1852cf52406753bb7d0fb1fe021f5b53135042d352171843c16c34818651685df3f88fcfeab43b9694df5b69e1553707a68d869b1542c80fe26c7ff314ee01627934edcfaa13566045fe910d340a3fff06c6af0fd732f8571690c95efcd08d0b4e", 0xa3) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x75f, 0x103382) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) fcntl$getflags(r0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000180)={@remote, @initdev, 0x0}, &(0x7f0000000200)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x9c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40840) sendfile(r2, r2, 0x0, 0x24002da8) shutdown(0xffffffffffffffff, 0x0) mmap(&(0x7f00000bd000/0x2000)=nil, 0x2000, 0x0, 0x20010, 0xffffffffffffffff, 0x390000) ioctl$LOOP_CLR_FD(r2, 0x4c01) 08:40:59 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81", 0x4a}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:59 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) timerfd_gettime(r0, 0x0) 08:40:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:40:59 executing program 1: set_robust_list(&(0x7f0000001140), 0x18) 08:40:59 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x240a9182143a2e04}, 0x40c0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0xc492, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) clock_gettime(0x3, &(0x7f00000000c0)) clock_settime(0x0, &(0x7f0000000400)={0x77359400}) clone(0x80000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) timer_getoverrun(0x0) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="73797a309c6383573ecb710e2ef2188169e4fe630cb4f0361e3444c425bc08feff78f0acb3f659c941ec3013630c00002e5d8fbb7a6f0000000000100006486f79c20000000000"], 0x4e) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x4c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}}, 0x20040014) poll(0x0, 0x0, 0x8000000000000200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r1, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) 08:40:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:40:59 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81", 0x4a}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:40:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000001280), 0x4) 08:40:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x471d7, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655f082c937c76662b4853ef010001000000dbf4655f000000000100000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000140)=ANY=[]) 08:40:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:40:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) [ 952.553076][T20908] loop7: detected capacity change from 0 to 1036 [ 952.619830][T20924] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 952.631190][T20924] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 952.639573][T20924] blk_update_request: I/O error, dev loop7, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 952.650878][T20924] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 952.659335][T20924] blk_update_request: I/O error, dev loop7, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 952.670584][T20924] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 952.678967][T20924] blk_update_request: I/O error, dev loop7, sector 24 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 952.690255][T20924] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 952.698696][T20924] blk_update_request: I/O error, dev loop7, sector 32 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 952.710059][T20924] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 952.718512][T20924] blk_update_request: I/O error, dev loop7, sector 40 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 952.729841][T20924] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 952.738530][T20924] blk_update_request: I/O error, dev loop7, sector 48 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 952.749776][T20924] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 952.758170][T20924] blk_update_request: I/O error, dev loop7, sector 56 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 952.769412][T20924] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 952.778321][T20924] blk_update_request: I/O error, dev loop7, sector 64 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 952.790277][T20924] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 952.798697][T20924] blk_update_request: I/O error, dev loop7, sector 72 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 952.809971][T20924] Buffer I/O error on dev loop7, logical block 9, lost async page write [ 952.853917][T20929] loop5: detected capacity change from 0 to 568 [ 952.901376][T20908] loop7: detected capacity change from 0 to 1036 [ 952.908190][T20929] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended 08:41:00 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000140)="120000001600e70d017b00000000", 0xe, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x5, 0x20, 0x0, 0x3, 0x0, 0xffffffffffffe1af, 0xc008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x8e1, 0x5}, 0x10, 0x6, 0x10001, 0x7, 0x40, 0x8, 0x101}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) recvmmsg(r1, &(0x7f0000004e00), 0x27b, 0x0, 0x0) write(r1, &(0x7f0000000040)="3bf6f00f98e79070744e30737c406b4f78d9cf462d6ac3fbfa0804fbdced9dc4f32573cbb578ccffc88a0bdc254e1114ea565f78c1bf89501cf8c1c8844a4228388c1852cf52406753bb7d0fb1fe021f5b53135042d352171843c16c34818651685df3f88fcfeab43b9694df5b69e1553707a68d869b1542c80fe26c7ff314ee01627934edcfaa13566045fe910d340a3fff06c6af0fd732f8571690c95efcd08d0b4e", 0xa3) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x75f, 0x103382) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) fcntl$getflags(r0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000180)={@remote, @initdev, 0x0}, &(0x7f0000000200)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x9c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40840) sendfile(r2, r2, 0x0, 0x24002da8) shutdown(0xffffffffffffffff, 0x0) mmap(&(0x7f00000bd000/0x2000)=nil, 0x2000, 0x0, 0x20010, 0xffffffffffffffff, 0x390000) ioctl$LOOP_CLR_FD(r2, 0x4c01) 08:41:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:00 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81", 0x4a}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:00 executing program 1: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 952.951068][T20929] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 08:41:00 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x240a9182143a2e04}, 0x40c0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0xc492, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) clock_gettime(0x3, &(0x7f00000000c0)) clock_settime(0x0, &(0x7f0000000400)={0x77359400}) clone(0x80000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) timer_getoverrun(0x0) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="73797a309c6383573ecb710e2ef2188169e4fe630cb4f0361e3444c425bc08feff78f0acb3f659c941ec3013630c00002e5d8fbb7a6f0000000000100006486f79c20000000000"], 0x4e) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x4c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}}, 0x20040014) poll(0x0, 0x0, 0x8000000000000200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r1, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) 08:41:00 executing program 5: mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0) 08:41:00 executing program 1: statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x0, 0x0) 08:41:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:00 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd1", 0x6f}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) [ 953.082067][T20954] loop7: detected capacity change from 0 to 1036 08:41:00 executing program 5: mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) 08:41:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a5d2e00000000000000000000000014000000110001"], 0x3c}}, 0x0) 08:41:00 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000140)="120000001600e70d017b00000000", 0xe, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x5, 0x20, 0x0, 0x3, 0x0, 0xffffffffffffe1af, 0xc008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x8e1, 0x5}, 0x10, 0x6, 0x10001, 0x7, 0x40, 0x8, 0x101}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) recvmmsg(r1, &(0x7f0000004e00), 0x27b, 0x0, 0x0) write(r1, &(0x7f0000000040)="3bf6f00f98e79070744e30737c406b4f78d9cf462d6ac3fbfa0804fbdced9dc4f32573cbb578ccffc88a0bdc254e1114ea565f78c1bf89501cf8c1c8844a4228388c1852cf52406753bb7d0fb1fe021f5b53135042d352171843c16c34818651685df3f88fcfeab43b9694df5b69e1553707a68d869b1542c80fe26c7ff314ee01627934edcfaa13566045fe910d340a3fff06c6af0fd732f8571690c95efcd08d0b4e", 0xa3) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x75f, 0x103382) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) fcntl$getflags(r0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000180)={@remote, @initdev, 0x0}, &(0x7f0000000200)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x9c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40840) sendfile(r2, r2, 0x0, 0x24002da8) shutdown(0xffffffffffffffff, 0x0) mmap(&(0x7f00000bd000/0x2000)=nil, 0x2000, 0x0, 0x20010, 0xffffffffffffffff, 0x390000) ioctl$LOOP_CLR_FD(r2, 0x4c01) 08:41:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:00 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) 08:41:00 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd1", 0x6f}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) [ 953.401263][T20980] loop7: detected capacity change from 0 to 1036 08:41:00 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x240a9182143a2e04}, 0x40c0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0xc492, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) clock_gettime(0x3, &(0x7f00000000c0)) clock_settime(0x0, &(0x7f0000000400)={0x77359400}) clone(0x80000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) timer_getoverrun(0x0) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="73797a309c6383573ecb710e2ef2188169e4fe630cb4f0361e3444c425bc08feff78f0acb3f659c941ec3013630c00002e5d8fbb7a6f0000000000100006486f79c20000000000"], 0x4e) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x4c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}}, 0x20040014) poll(0x0, 0x0, 0x8000000000000200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r1, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) 08:41:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:00 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000380)={0x0, 0x38, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000003c0)) 08:41:00 executing program 5: syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) 08:41:00 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd1", 0x6f}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:00 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000140)="120000001600e70d017b00000000", 0xe, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x5, 0x20, 0x0, 0x3, 0x0, 0xffffffffffffe1af, 0xc008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x8e1, 0x5}, 0x10, 0x6, 0x10001, 0x7, 0x40, 0x8, 0x101}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) recvmmsg(r1, &(0x7f0000004e00), 0x27b, 0x0, 0x0) write(r1, &(0x7f0000000040)="3bf6f00f98e79070744e30737c406b4f78d9cf462d6ac3fbfa0804fbdced9dc4f32573cbb578ccffc88a0bdc254e1114ea565f78c1bf89501cf8c1c8844a4228388c1852cf52406753bb7d0fb1fe021f5b53135042d352171843c16c34818651685df3f88fcfeab43b9694df5b69e1553707a68d869b1542c80fe26c7ff314ee01627934edcfaa13566045fe910d340a3fff06c6af0fd732f8571690c95efcd08d0b4e", 0xa3) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x75f, 0x103382) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) fcntl$getflags(r0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000180)={@remote, @initdev, 0x0}, &(0x7f0000000200)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x9c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40840) sendfile(r2, r2, 0x0, 0x24002da8) shutdown(0xffffffffffffffff, 0x0) mmap(&(0x7f00000bd000/0x2000)=nil, 0x2000, 0x0, 0x20010, 0xffffffffffffffff, 0x390000) ioctl$LOOP_CLR_FD(r2, 0x4c01) 08:41:00 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x0, 0x0) 08:41:00 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770c", 0x81}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) [ 953.781281][T21009] loop7: detected capacity change from 0 to 1036 08:41:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x10}}], 0x28}}], 0x1, 0x0) 08:41:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:00 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770c", 0x81}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:00 executing program 5: syz_read_part_table(0x0, 0x3, &(0x7f0000000300)=[{&(0x7f00000000c0), 0x0, 0xffffffff}, {0x0}, {&(0x7f00000001c0), 0x0, 0x9}]) [ 953.998796][T21034] loop5: detected capacity change from 0 to 264192 08:41:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4f8, 0x258, 0x0, 0xffffffff, 0x258, 0x178, 0x460, 0x460, 0xffffffff, 0x460, 0x460, 0x5, 0x0, {[{{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "771a011136c00652f876e7e1d78a971403f322441f1362c38d0f1c4e600ec04f8d45cb94388f5ad83047b513565a4961396076aae5e7bbbd808bf3f68841d58898850e1a0498c2786314b856af39d34c04cb8967384d9a338c9245f6b5ad66b5afaee3511f64b5cdb4f7a1bff48cdfd48a1a7e28cf0be0471527c0d179449c91"}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@private, @port, @icmp_id}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @gre_key, @gre_key}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x44}, @multicast1, 0x4826d76777e54108, 0x0, 'wlan0\x00', 'caif0\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@loopback, @ipv6=@rand_addr=' \x01\x00', @gre_key, @gre_key}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@set={{0x40, 'set\x00'}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @broadcast, @port, @icmp_id=0x67}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x558) 08:41:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:01 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770c", 0x81}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:01 executing program 3: clone(0x10009400, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)='A') 08:41:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x10}}], 0x28}}], 0x1, 0x0) 08:41:01 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001540)={&(0x7f0000000080)=@name, 0x10, 0x0}, 0x0) 08:41:01 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3cc", 0x8a}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) [ 954.384103][T21050] x_tables: duplicate underflow at hook 1 08:41:01 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="aa", 0x1, r0) keyctl$read(0xb, r1, 0x0, 0x4) 08:41:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000001180)={0x98, "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"}) 08:41:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x10}}], 0x28}}], 0x1, 0x0) 08:41:01 executing program 3: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0xe70}}]}}}]}}]}}, 0x0) 08:41:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 08:41:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:01 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3cc", 0x8a}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x10}}], 0x28}}], 0x1, 0x0) 08:41:01 executing program 0: syz_mount_image$f2fs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 08:41:01 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000000c0), 0x0, 0xffffffff}]) 08:41:01 executing program 2: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:01 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3cc", 0x8a}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@un=@abs={0x1}, 0x80) 08:41:01 executing program 2: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:01 executing program 1: mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=ANY=[]) r0 = syz_open_dev$vcsu(&(0x7f0000001f40)='/dev/vcsu#\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002740)={0x2020}, 0x2020) [ 954.666593][T21088] loop5: detected capacity change from 0 to 264192 [ 954.760413][T21088] loop5: detected capacity change from 0 to 264192 [ 954.890858][T17614] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 955.250867][T17614] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 955.420868][T17614] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 955.430011][T17614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.438619][T17614] usb 4-1: Product: syz [ 955.443108][T17614] usb 4-1: Manufacturer: syz [ 955.447688][T17614] usb 4-1: SerialNumber: syz [ 955.471988][T21078] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 955.696160][ T9118] usb 4-1: USB disconnect, device number 4 [ 956.460801][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 956.821046][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 956.992491][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 957.001731][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.009694][ T7] usb 4-1: Product: syz [ 957.015012][ T7] usb 4-1: Manufacturer: syz [ 957.019782][ T7] usb 4-1: SerialNumber: syz [ 957.041943][T21078] raw-gadget gadget: fail, usb_ep_enable returned -22 08:41:04 executing program 3: syz_read_part_table(0x0, 0x2, &(0x7f0000000300)=[{0x0, 0x0, 0xffffffff}, {&(0x7f0000000180)}]) 08:41:04 executing program 0: syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) 08:41:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb46", 0x8f}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:04 executing program 2: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:04 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000140)) timer_gettime(0x0, &(0x7f00000002c0)) 08:41:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000009480)={'ip6gre0\x00', 0x0}) [ 957.270890][ T7] usb 4-1: USB disconnect, device number 5 08:41:04 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}, {0x2, &(0x7f0000000280)=@string={0x2}}]}) 08:41:04 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:04 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x7fffffff}, 0x8) 08:41:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb46", 0x8f}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:04 executing program 5: clock_gettime(0x1, &(0x7f0000000140)) 08:41:04 executing program 3: bpf$MAP_CREATE(0xd, &(0x7f00000029c0), 0x40) 08:41:04 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb46", 0x8f}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:04 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$sock(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000100)="80", 0x1}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x50, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 08:41:04 executing program 0: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 08:41:04 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 08:41:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb460334", 0x91}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) [ 957.670819][T18437] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 958.030894][T18437] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 958.202185][T18437] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 958.211811][T18437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.219802][T18437] usb 2-1: Product: syz [ 958.224276][T18437] usb 2-1: SerialNumber: syz [ 958.462646][T18437] usb 2-1: USB disconnect, device number 12 [ 959.240821][ T9118] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 959.630858][ T9118] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 959.831265][ T9118] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 959.840506][ T9118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.849097][ T9118] usb 2-1: Product: syz [ 959.853595][ T9118] usb 2-1: SerialNumber: syz 08:41:07 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$sock(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000100)="80", 0x1}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x50, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 08:41:07 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:07 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) socketpair(0x2, 0x0, 0x7fffffff, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000040), 0x43) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, 0x0, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='memory.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 08:41:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000240)) 08:41:07 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$sock(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000100)="80", 0x1}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x50, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 08:41:07 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb460334", 0x91}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) [ 960.093615][ T9118] usb 2-1: USB disconnect, device number 13 08:41:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x7a}]}}, &(0x7f0000000140)=""/243, 0x26, 0xf3, 0x1}, 0x20) 08:41:07 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000003100)=[{{&(0x7f0000000040), 0x10, &(0x7f00000013c0)=[{&(0x7f0000000080)="1b06", 0x2}], 0x1, &(0x7f0000001440)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11}}], 0x30}}], 0x1, 0x804) 08:41:07 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb460334", 0x91}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000100)="16da", 0x2}], 0x1, &(0x7f0000001380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}, {{&(0x7f00000013c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001a00)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4, 0xcc}, @rr={0x7, 0x3, 0xf1}, @generic={0x44, 0x2}]}}}], 0x20}}], 0x2, 0x0) 08:41:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x6, 0x1, 0x0, &(0x7f0000000140)) 08:41:08 executing program 1: syz_mount_image$squashfs(&(0x7f0000000040)='squashfs\x00', &(0x7f0000000080)='./file0\x00', 0x717, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000640)) 08:41:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:08 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347a", 0x92}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x4b, 0x0, 0x300) 08:41:08 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) socketpair(0x2, 0x0, 0x7fffffff, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000040), 0x43) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, 0x0, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='memory.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 08:41:08 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8004801) 08:41:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x19, 0x9, 0x157, &(0x7f00000000c0)="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"}) 08:41:08 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347a", 0x92}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0xfffffeed) [ 961.127436][T21263] loop1: detected capacity change from 0 to 3 [ 961.158141][T21263] attempt to access beyond end of device [ 961.158141][T21263] loop1: rw=2048, want=8, limit=3 [ 961.169808][T21263] SQUASHFS error: Failed to read block 0x0: -5 [ 961.176719][T21263] unable to read squashfs_super_block 08:41:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r2) r3 = fcntl$dupfd(r0, 0x0, r0) flistxattr(r3, 0x0, 0x0) [ 961.235725][T21263] loop1: detected capacity change from 0 to 3 [ 961.242731][T21263] attempt to access beyond end of device [ 961.242731][T21263] loop1: rw=2048, want=8, limit=3 [ 961.253902][T21263] SQUASHFS error: Failed to read block 0x0: -5 [ 961.273230][T21263] unable to read squashfs_super_block 08:41:08 executing program 1: syz_mount_image$squashfs(&(0x7f0000000040)='squashfs\x00', &(0x7f0000000080)='./file0\x00', 0x717, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000640)) 08:41:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x5608, &(0x7f00000000c0)) 08:41:08 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347a", 0x92}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:08 executing program 1: syz_mount_image$squashfs(&(0x7f0000000040)='squashfs\x00', &(0x7f0000000080)='./file0\x00', 0x717, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000640)) 08:41:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4}, 0x14}}, 0x0) clock_gettime(0x0, &(0x7f0000010900)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000010680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000010940)={0x0, r1+60000000}) 08:41:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) close(r1) [ 961.470902][T21322] loop1: detected capacity change from 0 to 3 [ 961.494903][T21322] attempt to access beyond end of device [ 961.494903][T21322] loop1: rw=2048, want=8, limit=3 08:41:08 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x1, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:08 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x1, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) [ 961.560815][T21322] SQUASHFS error: Failed to read block 0x0: -5 [ 961.568385][T21322] unable to read squashfs_super_block 08:41:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/57) 08:41:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:09 executing program 1: syz_mount_image$squashfs(&(0x7f0000000040)='squashfs\x00', &(0x7f0000000080)='./file0\x00', 0x717, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000640)) 08:41:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x4a, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x401870c8) 08:41:09 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x1, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b65, &(0x7f00000000c0)) 08:41:09 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) [ 962.092910][T21368] loop1: detected capacity change from 0 to 3 08:41:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) [ 962.142905][T21368] attempt to access beyond end of device [ 962.142905][T21368] loop1: rw=2048, want=8, limit=3 [ 962.243496][T21368] SQUASHFS error: Failed to read block 0x0: -5 [ 962.298860][T21368] unable to read squashfs_super_block 08:41:09 executing program 3: clock_adjtime(0x0, &(0x7f00000002c0)={0xd34}) 08:41:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000040)=""/4096, 0x26, 0x1000, 0x8}, 0x20) 08:41:09 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x800, 0x0, 0x3, 0x1}, 0x20) 08:41:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:09 executing program 1: creat(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:41:09 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x4d00, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) dup3(r1, r0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x20600, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x1, 0x0, 0x0) 08:41:09 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x541b, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @remote}, 'veth0_virt_wifi\x00'}) 08:41:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/57) 08:41:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) setrlimit(0xf00, &(0x7f0000000080)) [ 962.598891][ T36] audit: type=1804 audit(1615797669.609:243): pid=21417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir604274765/syzkaller.5yPTjw/3507/bus" dev="sda1" ino=15746 res=1 errno=0 08:41:09 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:09 executing program 3: shmget(0x3, 0x4000, 0x7a2, &(0x7f0000ff9000/0x4000)=nil) [ 962.656315][ T36] audit: type=1800 audit(1615797669.609:244): pid=21417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15746 res=0 errno=0 08:41:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:09 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@mcast1, 0x0, r1}) 08:41:09 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/188, 0xbc}, 0x2}], 0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x2140, 0x0) getpeername$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000300)=0x1c) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x4000081, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='p', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 962.758815][ T36] audit: type=1804 audit(1615797669.619:245): pid=21417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir604274765/syzkaller.5yPTjw/3507/bus" dev="sda1" ino=15746 res=1 errno=0 [ 962.870866][ T36] audit: type=1804 audit(1615797669.859:246): pid=21417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir604274765/syzkaller.5yPTjw/3507/bus" dev="sda1" ino=15746 res=1 errno=0 [ 962.926658][T21445] netlink: 41476 bytes leftover after parsing attributes in process `syz-executor.3'. [ 962.931502][ T36] audit: type=1804 audit(1615797669.859:247): pid=21425 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir604274765/syzkaller.5yPTjw/3507/bus" dev="sda1" ino=15746 res=1 errno=0 [ 962.963506][ T36] audit: type=1800 audit(1615797669.859:248): pid=21417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15746 res=0 errno=0 08:41:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) getpgid(0xffffffffffffffff) 08:41:10 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x7a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x80045440, &(0x7f0000000000)) 08:41:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:10 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:10 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8993, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) 08:41:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 08:41:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000340)='./file0\x00', 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 08:41:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:10 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8947, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) 08:41:10 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e6931", 0x5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:10 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x9b, &(0x7f0000000080)=""/155, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:41:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x24}}, 0x0) 08:41:10 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x824b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000000)=""/67, 0x43) 08:41:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:10 executing program 1: r0 = add_key$keyring(&(0x7f0000004000)='keyring\x00', &(0x7f0000004040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0xe, r0, 0x0) 08:41:10 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e6931", 0x5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:10 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xc}, 0x40) 08:41:10 executing program 3: r0 = openat$nvram(0xffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, 0x0) 08:41:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:10 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e6931", 0x5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x6c9, 0x0, 0x300) 08:41:10 executing program 0: r0 = inotify_init() r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) fchown(r0, 0x0, 0x0) 08:41:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, r1, 0x5, 0x0, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x0, 0x57}}}}}, 0x20}}, 0x0) 08:41:10 executing program 3: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x0) 08:41:10 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4c", 0x8}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:10 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f00000000c0)=0x81, 0x4) 08:41:10 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000000)=0x80) 08:41:10 executing program 5: r0 = openat$autofs(0xffffff9c, &(0x7f00000007c0)='/dev/autofs\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f00000008c0)='.pending_reads\x00', 0x0, 0x0) 08:41:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:41:10 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4c", 0x8}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000040)={0xb5, ""/181}) 08:41:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:41:10 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x8980, 0x0) 08:41:10 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4c", 0x8}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:10 executing program 3: socket(0x1, 0x0, 0x326) 08:41:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000022c0)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000002280)=[@dstopts_2292={{0x14}}], 0x14}}], 0x1, 0x0) 08:41:10 executing program 5: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0) 08:41:10 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccf", 0x9}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:10 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000003680)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 08:41:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x2, 0x4) 08:41:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:10 executing program 0: r0 = add_key$keyring(&(0x7f0000004000)='keyring\x00', &(0x7f0000004040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x3, r0, 0x0) 08:41:10 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) gettid() sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x20000005) 08:41:10 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccf", 0x9}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:10 executing program 1: socketpair(0x10, 0x2, 0x0, &(0x7f00000001c0)) 08:41:10 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000100)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "290a0a0400bf3185d4966c70a9d18fa6c2dba7b3016c79f7146b14a1b3698ae1ae3fbaef9670cb47374500763397f8c402c42732f938b8dd3bdac67cc68cc694"}, 0x48, 0xfffffffffffffffd) keyctl$read(0xb, r0, 0x0, 0x0) 08:41:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:11 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccf", 0x9}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:11 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x8905, 0x0) 08:41:11 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:41:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1a, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0xfffffffd, 0x2}, 0x40) 08:41:11 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @remote}, 0x10) 08:41:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:11 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:11 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000340)=@hopopts={0x0, 0x26, [], [@calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0x87, "f58a4f78dfc591bb46b906d082eb4ba31b45b5349ac8fb8d9ceb4cfced474bdf8e961978d23e154bd25e482e97ed5a6811b8afa93d3f7185f68dddc7471b22b644a2d5"}, @hao={0xc9, 0x10, @mcast2}, @generic={0x0, 0xb3, "6ac29bb7f5e0f528bf18fecec40caa207670a64c0ee4cbc94045770cba3d32c26638e7de2831d8cb0fb3e4de273aad491cfa00fd83e5d04211a7c49540d7e2e8c3e1f64a54ec75b2844b45e92aebd6faa185799e63ace84505a9c90fe5ecf1c6c2e3906b59a1a4ab44f935ec54ff3e8e10867e97261f1aa0bf3b7d0fe5c63098a834388732d271a3b3ee0c63519b8c6beaf4adaaf9a0b0bcbd44e44534e7f05b04877c1b411f140ef76fe52c60abbdda0c250ba0049447a74066fbc50f1887490e2dbd4f775242a7e2189941df"}, @padn={0x1, 0x31, [0x0, 0x0]}, @jumbo, @hao={0xc9, 0x0, @empty}, @enc_lim, @hao={0xc9, 0x0, @loopback}, @jumbo]}, 0x51f902e568708488) 08:41:11 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x400, 0x0, 0x2, 0x1}, 0x20) 08:41:11 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580)='tmpfs\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) 08:41:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/net/tun\x00', 0x1, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 08:41:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f0000001400)) 08:41:11 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:11 executing program 5: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) [ 964.196992][T21588] tmpfs: Bad value for 'uid' [ 964.207576][T21588] tmpfs: Bad value for 'uid' 08:41:11 executing program 1: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000180)) get_mempolicy(&(0x7f00000011c0), &(0x7f0000001200), 0x81, &(0x7f0000ffe000/0x2000)=nil, 0x4) 08:41:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001900)=@abs, 0x6e) 08:41:11 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 08:41:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 08:41:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000040)={'veth0\x00', @ifru_settings={0x0, 0x0, @te1=0x0}}) 08:41:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000040)={'veth1_virt_wifi\x00', @ifru_hwaddr=@multicast}) 08:41:11 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:11 executing program 5: setsockopt(0xffffffffffffffff, 0x7a4278d8, 0x1, &(0x7f00000001c0)="36c9b56eae86e9e21b7543244d973875779bb447c6c503fe3769df26e79fac06210a30b680e8311a1672df6478afaaae88a9fe671607645cc8eed64546d7afaec42e54a61485c84a58f53a8ff81057fa53ad39ade741e97253a215439987ad4091b95fddf056b5bb440720be3286b77b15d1ab367d334ba86fbcd98062476752cfb020a582", 0x85) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'dummy0\x00', {}, 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4000, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000e40)={0x3, 'lo\x00'}) r3 = accept(r2, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000000)=0x80) sendmsg$sock(r3, &(0x7f0000000300)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast1, 0x40}, 0x80}, 0x80) 08:41:11 executing program 0: mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x1}) 08:41:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f0000000040)) 08:41:11 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:11 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e7a000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e79000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000e7a000/0x3000)=nil, &(0x7f0000e7c000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) 08:41:12 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002140)='/dev/nvram\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 08:41:12 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x4, 0x0) 08:41:12 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x1}]}, 0x18}}, 0x0) 08:41:12 executing program 5: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 08:41:12 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:12 executing program 1: r0 = socket(0x11, 0x3, 0x0) connect$unix(r0, 0x0, 0xffffffffffffff02) 08:41:12 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:12 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x200000a0) 08:41:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:12 executing program 1: r0 = socket(0x28, 0x2, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 08:41:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 08:41:12 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40) 08:41:12 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:12 executing program 0: syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000580)="7680b34bdfb04a5425844cc1095ff0e2fd6e6f2fe67eb948120d24474585479ac296986c54124b0f44bc4d465164c1890a98135a5cbb4d7bcd56ac61c4f64a05fe3b04ccc259d28d9339c0d57da6e4f6", 0x50, 0x1}, {0x0, 0x0, 0xfffffffffffeffff}], 0x0, &(0x7f0000000480)=ANY=[]) 08:41:12 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20000, 0x0) 08:41:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:12 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000780)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) [ 965.495409][T21672] ieee802154 phy0 wpan0: encryption failed: -22 08:41:12 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000080)=0x3f) 08:41:12 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:12 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) 08:41:12 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0xc0045103) 08:41:12 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000006"]) [ 965.630010][T21681] hfsplus: invalid uid specified 08:41:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) 08:41:12 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) write$sequencer(r0, &(0x7f0000000200)=[@s], 0x4) 08:41:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) [ 965.656211][T21681] hfsplus: unable to parse mount options 08:41:12 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2200000014002563040000000000", 0xe) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:12 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "87926069fbd61fd11ce0b8d55e84b427a1b530dc4886b9e4608e1d77a1934ff977a12f3ee507c32d1743bb0ceb2236b899d4b8b1e86901b64f78b4f4c2b0ec36"}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r0) 08:41:12 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000002300)={[{@session={'session'}}]}) 08:41:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) 08:41:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000021c0)={0x10, 0x1e, 0x1}, 0x10}], 0x1}, 0x0) 08:41:12 executing program 0: r0 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000080)=""/4096) 08:41:12 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2200000014002563040000000000", 0xe) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) [ 965.854638][T21710] hfsplus: unable to find HFS+ superblock 08:41:12 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2200000014002563040000000000", 0xe) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) [ 965.934657][T21710] hfsplus: unable to find HFS+ superblock 08:41:13 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000006"]) 08:41:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) 08:41:13 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f00000038c0)=[{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0xe0}], 0x1, 0x0) 08:41:13 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0xc, 0x0, r0) 08:41:13 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x6, &(0x7f0000000f00)=@filter={'filter\x00', 0xe, 0x3, 0x0, [0x0, 0x200000c0, 0x200000f0, 0x20000ace], 0x0, 0x0, 0x0}, 0xa0e) 08:41:13 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301", 0x15) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) [ 966.149256][T21736] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 08:41:13 executing program 1: getgroups(0x1, &(0x7f00000015c0)=[0xffffffffffffffff]) 08:41:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 08:41:13 executing program 0: setxattr$system_posix_acl(&(0x7f0000001540)='./file0\x00', 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x0, 0x0) 08:41:13 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301", 0x15) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:13 executing program 5: syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000840)) [ 966.272138][T21746] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 08:41:13 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000140)={0x0, "b1f8f08bcdc614054f0f8938102eba16c5633dd4a20e1dc7e020f7d623515d0405bdc6e2b0f596d52b25cfb9b107a9a935f4cc9f376089f672cf44884710c0ca"}, 0x48, 0xfffffffffffffffd) keyctl$link(0x11, r0, 0x0) [ 966.350668][T21753] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 966.441282][T21753] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 08:41:13 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000006"]) 08:41:13 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301", 0x15) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:13 executing program 0: r0 = socket(0x29, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x2000c800) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 08:41:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 08:41:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0x1, 0x0, 0x0, {0x0}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) 08:41:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x2a, 0x0, 0x1}, 0x40) 08:41:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 08:41:13 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x29, &(0x7f0000000f00)=@filter={'filter\x00', 0xe, 0x3, 0x0, [0x0, 0x200000c0, 0x200000f0, 0x20000ace], 0x0, 0x0, 0x0}, 0xa0e) 08:41:13 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x13, &(0x7f0000000f00)=@filter={'filter\x00', 0xe, 0x3, 0x0, [0x0, 0x200000c0, 0x200000f0, 0x20000ace], 0x0, 0x0, 0x0}, 0xa0e) 08:41:13 executing program 0: mknod(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0) [ 966.639014][T21778] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 08:41:13 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000", 0x18) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:13 executing program 5: socket(0x1d, 0x0, 0x5575e544) [ 966.810860][T21792] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 08:41:13 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000006"]) 08:41:13 executing program 0: syz_mount_image$btrfs(&(0x7f00000002c0)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000680)=[{0x0, 0x0, 0xfffffffffffffffa}], 0x0, &(0x7f0000000740)={[], [{@context={'context', 0x3d, 'user_u'}}]}) 08:41:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 08:41:13 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x23, 0x0, 0xa0e) 08:41:13 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000", 0x18) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:13 executing program 5: syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, &(0x7f0000001440), 0x0, 0x0) syz_mount_image$ufs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000880), 0x0, 0x0) 08:41:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 08:41:14 executing program 0: r0 = add_key$keyring(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000002480)='keyring\x00', &(0x7f00000024c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$chown(0x4, r1, 0xee00, 0xee01) [ 967.044815][T21806] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 08:41:14 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000100)={0x24, @long}, 0x14) 08:41:14 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) accept4(r0, 0x0, 0x0, 0x80000) 08:41:14 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000", 0x18) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 967.288019][T21829] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 08:41:14 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2200000014002563040000000000000402080313010000000800", 0x1a) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:14 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x4cf41) 08:41:14 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0xc08c5102) 08:41:14 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) 08:41:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:14 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000140)={0x0, "b1f8f08bcdc614054f0f8938102eba16c5633dd4a20e1dc7e020f7d623515d0405bdc6e2b0f596d52b25cfb9b107a9a935f4cc9f376089f672cf44884710c0ca"}, 0x48, 0xfffffffffffffffd) keyctl$link(0xe, r0, 0x0) 08:41:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:14 executing program 0: setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0xfffffeea) [ 967.504617][T21843] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 08:41:14 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000180)={0x0, "87926069fbd61fd11ce0b8d55e84b427a1b530dc4886b9e4cc0a8978b82d7ff277a12f3ee503c32d1743bb0ceb2236b899d4b8b1e86901b64f78b4f4c2b0ec36"}, 0x48, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f0000000000)='w', 0x1) 08:41:14 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0xa, &(0x7f0000000f00)=@filter={'filter\x00', 0xe, 0x3, 0x0, [0x0, 0x200000c0, 0x200000f0, 0x20000ace], 0x0, 0x0, 0x0}, 0xa0e) 08:41:14 executing program 5: fanotify_mark(0xffffffffffffffff, 0x9, 0x0, 0xffffffffffffff9c, 0x0) 08:41:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:14 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2200000014002563040000000000000402080313010000000800", 0x1a) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:14 executing program 0: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) time(&(0x7f0000000200)) 08:41:14 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x1, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 08:41:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x12040, 0x0) [ 967.665006][T21858] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 08:41:14 executing program 3: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000140)={0x0, "b1f8f08bcdc614054f0f8938102eba16c5633dd4a20e1dc7e020f7d623515d0405bdc6e2b0f596d52b25cfb9b107a9a935f4cc9f376089f672cf44884710c0ca"}, 0x48, 0xfffffffffffffffd) keyctl$unlink(0x9, r1, r0) 08:41:14 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="2200000014002563040000000000000402080313010000000800", 0x1a) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:14 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@device_a={0x8, 0x2, 0x11, 0x0, 0xe0}, 0x0, 0x0) 08:41:14 executing program 1: r0 = socket$inet(0x2, 0x3, 0x9) setsockopt$inet_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) 08:41:14 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2a, 0x0, 0xa0e) [ 967.837603][T21874] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 967.842881][T21876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:41:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$nbd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="679b66ee304fa8db4dc6fcdf8da782b90683316a03575fb8994919ce2cbf0a29649a532f9f12f5149843b54f95ea39a4f2d8422449ebc6b3b859075ad27b699850c67310b0004dee22ee1ba19914a2b9eef30e4c157fdf4048bb5c8013a8b39107d2d4b27ad63029f48f3ef6776b2ead9ce2cc69a6e80a8856743e403c12d471d524751a95fc556c17c3370cd94b19cc59ac97a8b0add1a281e746696cbcf73daefaf317990b34c5b22a98a64c98ecf4db55fba34b00dd8d7c3bc5bfb57a11000000000000000000000000000000fa088447dddadcf0404bebf8348f1f90c0fd02e1a5a8b41377d21e7d03f46b16a514f74966ae5ff4f98491daa832e6d4deb27995ae8ab350e1df6a9501805aaa4164ef9a4def5209a23c064f98a1438678f3361aa9282c9a7474b7cea65cb9df04dd005afc99b4c406926012d54f172bf38b686e95af5c5fab0de2d3d1137c74b2eb772b8b1eebc58eb43fb07eb3edcb61609074af3cd657b2dd73dcf9c5c0f31de1b46e7ff9d8d4ffda03c447b574e668354c66714bc6b35ae8ff1e5edfadd2a16d159b7f6e"], 0x805) 08:41:14 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000000, 0x0) 08:41:14 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000500)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f00000029c0)='./file1\x00', &(0x7f0000002a00)='security.evm\x00', 0x0, 0x0, 0x0) 08:41:14 executing program 1: syz_mount_image$btrfs(&(0x7f00000002c0)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000740)) 08:41:15 executing program 3: r0 = socket(0x23, 0x2, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 08:41:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:15 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000000, 0x0) 08:41:15 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x5100, 0x0) 08:41:15 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) lseek(r0, 0x0, 0x0) 08:41:15 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x20) 08:41:15 executing program 1: keyctl$link(0x17, 0x0, 0x0) 08:41:15 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/ipc\x00') 08:41:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:15 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000000, 0x0) [ 968.200144][T21876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:41:15 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 08:41:15 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@huge_always='huge=always'}, {@nr_inodes={'nr_inodes', 0x3d, [0x0]}}]}) 08:41:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000110) r3 = epoll_create(0x100) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb0000001}) epoll_wait(r3, &(0x7f0000000240)=[{}], 0x1, 0x2dd) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) 08:41:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:15 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f0000000080)=ANY=[]) getdents64(r1, &(0x7f0000000300)=""/4096, 0x1000) getdents64(r1, 0x0, 0x0) 08:41:15 executing program 0: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, 0x0) 08:41:15 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 08:41:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:15 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) [ 968.512579][T21931] tmpfs: Bad value for 'nr_inodes' [ 968.526407][T21933] loop1: detected capacity change from 0 to 8 [ 968.539153][T21931] tmpfs: Bad value for 'nr_inodes' 08:41:15 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/237) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="80fd", 0x2}, {&(0x7f0000000340)='R', 0x1}], 0x2, 0x0, 0x0) 08:41:15 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f0000000080)=ANY=[]) getdents64(r1, &(0x7f0000000300)=""/4096, 0x1000) getdents64(r1, 0x0, 0x0) 08:41:15 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f0000000080)=ANY=[]) getdents64(r1, &(0x7f0000000300)=""/4096, 0x1000) getdents64(r1, 0x0, 0x0) 08:41:15 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 08:41:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 968.773604][T21966] loop1: detected capacity change from 0 to 8 08:41:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0x0, 0x200, 0x98, 0x98, 0x178, 0x240, 0x200, 0x200, 0x200, 0x240, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'netpci0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@statistic={{0x38, 'statistic\x00'}, {0x0, 0x0, 0xfffffffc}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0x40004007fff, 0x32fe3cf1}, 0x14) sendfile(r1, r0, 0x0, 0x4000000000edb9) 08:41:16 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/237) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="80fd", 0x2}, {&(0x7f0000000340)='R', 0x1}], 0x2, 0x0, 0x0) 08:41:16 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f0000000080)=ANY=[]) getdents64(r1, &(0x7f0000000300)=""/4096, 0x1000) getdents64(r1, 0x0, 0x0) 08:41:16 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 08:41:16 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f0000000080)=ANY=[]) getdents64(r1, &(0x7f0000000300)=""/4096, 0x1000) getdents64(r1, 0x0, 0x0) 08:41:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 08:41:16 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f0000000080)=ANY=[]) getdents64(r1, &(0x7f0000000300)=""/4096, 0x1000) getdents64(r1, 0x0, 0x0) 08:41:16 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 08:41:16 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/237) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="80fd", 0x2}, {&(0x7f0000000340)='R', 0x1}], 0x2, 0x0, 0x0) [ 969.416823][T21990] loop1: detected capacity change from 0 to 8 [ 969.452416][T21999] x_tables: duplicate underflow at hook 2 08:41:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) exit_group(0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 08:41:16 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f0000000080)=ANY=[]) getdents64(r1, &(0x7f0000000300)=""/4096, 0x1000) getdents64(r1, 0x0, 0x0) 08:41:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 08:41:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000100)={0x1, @write_voice_setting={{0xc26, 0x2}}}, 0x6) [ 969.535332][T21999] x_tables: duplicate underflow at hook 2 08:41:16 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/237) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="80fd0696b293", 0x6}], 0x1, 0x0, 0x0) 08:41:16 executing program 2: r0 = syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f0000000080)=ANY=[]) openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/4096, 0x1000) 08:41:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) 08:41:16 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/237) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="80fd", 0x2}, {&(0x7f0000000340)='R', 0x1}], 0x2, 0x0, 0x0) [ 969.670855][T22022] loop1: detected capacity change from 0 to 8 08:41:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000100)={0x1, @write_voice_setting={{0xc26, 0x2}}}, 0x6) 08:41:16 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) 08:41:16 executing program 1: r0 = socket(0x11, 0x3, 0x0) connect(r0, &(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x1}, 0x8) 08:41:16 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000500)=[{0x0}], 0x1) [ 969.754800][T22043] loop2: detected capacity change from 0 to 8 08:41:16 executing program 0: r0 = socket$unix(0x1e, 0x3, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) 08:41:16 executing program 5: r0 = socket$inet6(0x18, 0x1, 0x0) listen(r0, 0x0) connect(r0, &(0x7f0000000000)=@in={0x2, 0x2}, 0xc) 08:41:16 executing program 2: r0 = socket$inet6(0x18, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@in6={0x18, 0x3}, 0xc) 08:41:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000100)={0x1, @write_voice_setting={{0xc26, 0x2}}}, 0x6) 08:41:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000940)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QUw!j\x91\x0eW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1\xb04A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf\x8b\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c\x83\xe7\ng\x87\xd930x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300fdff00080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x6}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x3}}}]}]}]}}]}, 0x50}}, 0x0) [ 970.031006][T22074] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 970.078945][T22079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:41:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4008ae89, &(0x7f0000000100)={"06000000dd245c840a010000c9c8dc1964325fa96fa42b76014d564b2bec0ba41f0100003a40c8a4020000403b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a03001d264ffa8b46485f02baee010100c04252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525a72f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcda5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b0400a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe65449b404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235ea5a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d4e185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc02fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 08:41:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000100)={0x1, @write_voice_setting={{0xc26, 0x2}}}, 0x6) 08:41:17 executing program 2: recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) socketpair(0x9, 0x0, 0x0, &(0x7f0000000280)) 08:41:17 executing program 5: recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) socket$l2tp(0x2, 0x2, 0x73) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000180)) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0xbd8, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfff, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x80000) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x5f63, &(0x7f00000004c0)={0x0, 0xbe56, 0x1, 0x3, 0x150}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1ebd365d3a77ca14, 0x10, 0xffffffffffffffff, 0x10000000) 08:41:17 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00', 0xffffffffffffffff) 08:41:17 executing program 1: recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/13, 0xd, 0x2000, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x54, 0x9064, 0x8, 0x8, 0x3, 0x81}) sched_rr_get_interval(0x0, &(0x7f00000000c0)) clock_gettime(0x3, &(0x7f0000000100)) socket$l2tp(0x2, 0x2, 0x73) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000180)) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0xbd8, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfff, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) clock_gettime(0x5, &(0x7f0000000240)) socketpair(0x9, 0x4, 0x2, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0xc, 0x8b09, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x40) accept4$x25(0xffffffffffffffff, &(0x7f0000000380)={0x9, @remote}, &(0x7f00000003c0)=0x12, 0x80000) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000400), 0x4) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000440), &(0x7f0000000480)=0x4) syz_io_uring_setup(0x5f63, &(0x7f00000004c0)={0x0, 0xbe56, 0x1, 0x3, 0x150}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000580)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1ebd365d3a77ca14, 0x10, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f00000005c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x1, 0x5, 0x0, 0x3, 0x3}, 0x7fff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) 08:41:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4408, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:41:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x101, 0x800000000000406c}, 0x90030, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x5a) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x38c) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') 08:41:17 executing program 1: perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40104}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:41:17 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) listen(r0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240), 0x4) 08:41:17 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x42c80, 0x0, 0x0, 0x9, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$binfmt_elf32(r0, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x4a3) chown(&(0x7f00000002c0)='./file0/file0\x00', 0xee00, 0x0) socket$unix(0x1, 0x400040000000001, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000700)={@private0, 0x74}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='schedstat\x00') sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000ec0)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYBLOB="eeff2b010000200300", @ANYRES64, @ANYBLOB="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"], 0x488}, 0x1, 0x0, 0x0, 0x1}, 0x8001) 08:41:17 executing program 4: symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0xffffffffffffffff, 0x0) 08:41:17 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 08:41:17 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x10a10, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0xffffffffffffffff}}, 0x0) 08:41:17 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 970.522555][T22114] loop7: detected capacity change from 0 to 1036 08:41:17 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x10a10, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 08:41:17 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r0, 0x0) 08:41:17 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x0) 08:41:17 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:41:17 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) truncate(&(0x7f0000000080)='./file0\x00', 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0x0) 08:41:17 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r0, 0x0) 08:41:17 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) 08:41:17 executing program 3: symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 08:41:17 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001200)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 08:41:17 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0x0) 08:41:17 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 08:41:17 executing program 3: symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/19, 0x13) 08:41:17 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 08:41:17 executing program 5: symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') r0 = geteuid() lchown(&(0x7f0000000040)='./file0\x00', r0, 0xffffffffffffffff) 08:41:17 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 08:41:18 executing program 1: r0 = socket(0x18, 0x2, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/112, 0x70}, {&(0x7f0000000100)=""/22, 0x16}, {&(0x7f0000000280)=""/102400, 0xffffffffffffffeb}], 0x3, &(0x7f00000001c0)=""/51, 0x33}, 0x0) 08:41:18 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x10a10, 0xa0) truncate(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) 08:41:18 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x10a10, 0xa0) truncate(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 08:41:18 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) truncate(&(0x7f0000000080)='./file0\x00', 0x0) truncate(&(0x7f0000000380)='./file0\x00', 0x0) truncate(&(0x7f0000001100)='./file0\x00', 0x0) 08:41:18 executing program 2: mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) 08:41:18 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000ba5000/0x1000)=nil, 0x1000, 0x0, 0x2810, r0, 0x0) 08:41:18 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 08:41:18 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:41:18 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) truncate(&(0x7f0000001100)='./file0\x00', 0x0) 08:41:18 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:41:18 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0) 08:41:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x806, r3, 0x1, 0x0, 0x6, @random="138c3027a678"}, 0x14) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) mkdir(&(0x7f0000000080)='./file0\x00', 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8936, &(0x7f0000000380)={@dev={0xfe, 0x80, [], 0x26}, 0x7d, r5}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x95}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}}, 0x0) 08:41:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b5b330738000000000000000000000000000000000000006d"], 0x40) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) 08:41:18 executing program 1: pipe(&(0x7f0000000c40)) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x20000000000000}, &(0x7f0000000180), 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:41:18 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000380)) exit_group(0x0) 08:41:18 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11106}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) kcmp(r0, 0x0, 0x4, 0xffffffffffffffff, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x1, 0x0) exit_group(0x0) 08:41:18 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 08:41:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000040)={0x1, 0x0, 0x0, "cc"}) 08:41:18 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 08:41:18 executing program 4: syz_io_uring_setup(0xe45, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 971.317407][T22217] ptrace attach of "/root/syz-executor.2"[22214] was attempted by "/root/syz-executor.2"[22217] [ 971.328250][T22218] ptrace attach of "/root/syz-executor.3"[22215] was attempted by "/root/syz-executor.3"[22218] 08:41:18 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000340)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 08:41:18 executing program 5: socketpair(0x1, 0x0, 0x7, &(0x7f0000000040)) [ 971.387510][T22224] sd 0:0:1:0: device reset 08:41:18 executing program 3: mq_open(&(0x7f00000001c0)='!(%.}[\\\x00', 0x0, 0x0, &(0x7f0000000200)) [ 971.419207][T22226] sd 0:0:1:0: device reset 08:41:18 executing program 0: r0 = socket$inet(0x10, 0x80002, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="240000001e0007021dfffd946f610500020003e8fe02080100010800080002000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 08:41:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) futex(0x0, 0x6, 0x0, &(0x7f0000000280), 0x0, 0x0) 08:41:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000040)={0x1, 0x0, 0x0, "cc"}) 08:41:18 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000000800020002000000bcf307802ce67265cab172394797cf0e080006001000000008000600b30000000800060000000000080006000000000014000780080006000000000008400500000000000c0007800800050000000000540007800800050000000000080006000000000008000600000000000800060000000000080006000000000008000500000000f007000500000000000800050000000000080005000000000008000600002000000c00078008000500000000000c00078008000500000000003800088034000780080005000000000008000600000000000800050000000000080006000000000008000500000000000800050036"], 0x110}, 0x1, 0x0, 0x0, 0x80c0}, 0x904) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a8200040090f7c10f4b31901b77481e35fd008a000b"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:41:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004105) 08:41:18 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x19401, 0x0) [ 971.516335][T22236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 971.555146][T22243] sd 0:0:1:0: device reset 08:41:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000040)={0x1, 0x0, 0x0, "cc"}) 08:41:18 executing program 1: syz_io_uring_setup(0x137e, &(0x7f00000034c0)={0x0, 0x0, 0x20}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000003540), &(0x7f0000003580)) 08:41:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000040)={0x1, 0x0, 0x0, "cc"}) [ 971.638107][T22249] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 971.638124][T22249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 08:41:18 executing program 0: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000440)="90", 0x1) 08:41:18 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000040)={0x1, 0x0, 0x0, "cc"}) [ 971.650380][T22255] sd 0:0:1:0: device reset 08:41:18 executing program 2: r0 = mq_open(&(0x7f00000001c0)='!(%.}[\\\x00', 0x0, 0x0, &(0x7f0000000200)) mq_notify(r0, &(0x7f0000000240)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}) [ 971.721472][T22260] sd 0:0:1:0: device reset 08:41:18 executing program 0: syz_mount_image$tmpfs(&(0x7f00000043c0)='tmpfs\x00', &(0x7f0000004400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={[{@size={'size', 0x3d, [0x0]}}]}) 08:41:18 executing program 1: process_vm_writev(0x0, &(0x7f0000003cc0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r0 = fork() process_vm_writev(r0, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000002bc0)=""/4096, 0x1000}], 0x1, 0x0) 08:41:18 executing program 2: r0 = getpgid(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) kcmp(r0, 0x0, 0x4, 0xffffffffffffffff, r1) perf_event_open(0x0, r0, 0xb, 0xffffffffffffffff, 0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x1, &(0x7f0000000380)="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") exit_group(0x0) [ 971.768823][T22265] sd 0:0:1:0: device reset [ 971.780659][T22267] sd 0:0:1:0: device reset [ 971.868760][T22272] tmpfs: Bad value for 'size' [ 971.874719][T22272] tmpfs: Bad value for 'size' [ 971.940851][T22280] ptrace attach of "/root/syz-executor.2"[22279] was attempted by "/root/syz-executor.2"[22280] 08:41:19 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_io_uring_setup(0x1e26, &(0x7f00000003c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 08:41:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x8, 0x0, "e3dd2d66ecc43832"}) 08:41:19 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000200)=0x0) io_getevents(r0, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], 0x0) io_destroy(r0) 08:41:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x0) open(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x24}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:19 executing program 1: r0 = mq_open(&(0x7f00000001c0)='!(%.}[\\\x00', 0x0, 0x0, 0x0) mq_notify(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 08:41:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 08:41:19 executing program 3: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x77359400}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20058041, &(0x7f0000000040)={0xa, 0x2}, 0x1c) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) timer_create(0x0, 0x0, &(0x7f00000002c0)) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x0) 08:41:19 executing program 5: unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) modify_ldt$read_default(0x2, &(0x7f0000000040)=""/197, 0xc5) syz_genetlink_get_family_id$gtp(&(0x7f0000000700)='gtp\x00', 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000001280)='ext3\x00', &(0x7f00000012c0)='./file0\x00', 0xffff, 0x2, &(0x7f0000001400)=[{&(0x7f0000001300)="3c0bc15bd8fb05afa3e0dca719eb904adfcf44a0b7134376b28da5f1fe7856d73a6d60b8fd1f9118e11f20f3f8bcef82ea841d5d0032da01f41e20e7c44f826352f001b296d4b91f04de64062ee9964f94b742401d07", 0x56, 0x1c}, {&(0x7f0000001380)="54f59c0574bee90a8fea5e4901c5b07fff59d138696fe5aac3f1cab3232c2607e8a7481e6da12ea255fbfc47f01ca4451091c1ad69585f8db52bb38ca23f2db00266ddce4069a41261fb839ef0b1df857e44e2361530736817ca9d0747127df4", 0x60}], 0x2000840, &(0x7f0000001440)={[{@nouser_xattr='nouser_xattr'}, {@mblk_io_submit='mblk_io_submit'}, {@nojournal_checksum='nojournal_checksum'}], [{@subj_role={'subj_role', 0x3d, '/dev/full\x00'}}]}) 08:41:19 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setresgid(0x0, 0x0, 0x0) 08:41:19 executing program 1: clock_getres(0x0, &(0x7f0000000800)) [ 972.731041][T22314] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 972.747007][T22313] loop5: detected capacity change from 0 to 127 08:41:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x0) open(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x24}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:19 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000000800020002000000bcf307802ce67265cab172394797cf0e080006001000000008000600b30000000800060000000000080006000000000014000780080006000000000008400500000000000c0007800800050000000000540007800800050000000000080006000000000008000600000000000800060000000000080006000000000008000500000000f007000500000000000800050000000000080005000000000008000600002000000c00078008000500000000000c00078008000500000000003800088034000780080005000000000008000600000000000800050000000000080006000000000008000500000000000800050036"], 0x110}, 0x1, 0x0, 0x0, 0x80c0}, 0x904) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a8200040090f7c10f4b31901b77481e35fd008a000b"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 972.777271][T22313] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 08:41:19 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10) 08:41:19 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) [ 972.942241][T22339] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 972.950499][T22339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 08:41:20 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:41:20 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000080)={0x20000000}) 08:41:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x0) open(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x24}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:20 executing program 1: syz_mount_image$udf(&(0x7f0000000080)='udf\x00', &(0x7f0000000400)='./file0\x00', 0x8000, 0x0, &(0x7f0000000040), 0xc401, &(0x7f0000000000)) 08:41:20 executing program 3: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x77359400}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20058041, &(0x7f0000000040)={0xa, 0x2}, 0x1c) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) timer_create(0x0, 0x0, &(0x7f00000002c0)) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x0) 08:41:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@mcast2, 0x9, 0x0, 0x0, 0x8}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f00000017c0), 0x1d0, 0x6c000000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) [ 973.568282][T22361] loop1: detected capacity change from 0 to 64 [ 973.585217][T22361] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 08:41:20 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setregid(0x0, 0x0) 08:41:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x0) open(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x24}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:20 executing program 4: unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000f40)='./file0\x00', 0x0, 0x0) [ 973.697476][T22361] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 973.726548][T22361] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 08:41:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ppoll(&(0x7f0000000040)=[{r0}, {r0}], 0x2, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 08:41:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) 08:41:20 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2}) [ 973.775815][T22361] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 973.815144][T22361] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 08:41:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 08:41:20 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) 08:41:20 executing program 4: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x10000}, 0x0, 0x0) [ 973.876937][T22361] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 973.912471][T22361] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 973.933954][T22361] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 973.944447][T22361] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 974.025854][T22361] loop1: detected capacity change from 0 to 64 [ 974.034016][T22361] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 974.045163][T22361] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 974.064753][T22361] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 974.077741][T22361] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 974.088185][T22361] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 974.107981][T22361] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 974.120209][T22361] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 974.132752][T22361] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 974.143749][T22361] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) 08:41:21 executing program 1: syz_mount_image$udf(&(0x7f0000000080)='udf\x00', &(0x7f0000000400)='./file0\x00', 0x8000, 0x0, &(0x7f0000000040), 0xc401, &(0x7f0000000000)) [ 974.254898][T22412] loop1: detected capacity change from 0 to 64 [ 974.263969][T22412] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 974.274334][T22412] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 974.284537][T22412] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 974.294987][T22412] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 974.305429][T22412] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 974.315774][T22412] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 974.326064][T22412] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 974.336440][T22412] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 974.346646][T22412] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) 08:41:21 executing program 3: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x77359400}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20058041, &(0x7f0000000040)={0xa, 0x2}, 0x1c) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) timer_create(0x0, 0x0, &(0x7f00000002c0)) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x0) 08:41:21 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) statfs(0x0, 0x0) 08:41:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) dup2(r3, r0) 08:41:21 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 08:41:21 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000f40)='/proc/schedstat\x00', 0x0, 0x0) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x0, r1) dup2(r0, r2) 08:41:21 executing program 1: syz_mount_image$udf(&(0x7f0000000080)='udf\x00', &(0x7f0000000400)='./file0\x00', 0x8000, 0x0, &(0x7f0000000040), 0xc401, &(0x7f0000000000)) 08:41:21 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000340)={0x0, 0x3}) 08:41:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() 08:41:21 executing program 0: syz_mount_image$udf(&(0x7f0000001a80)='udf\x00', &(0x7f0000001ac0)='./file1\x00', 0x0, 0x0, &(0x7f0000001e00), 0x0, &(0x7f0000001e80)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}]}) 08:41:21 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) lchown(0x0, 0x0, 0x0) [ 974.491736][T22431] loop1: detected capacity change from 0 to 64 [ 974.517954][T22431] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 974.529431][T22431] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 08:41:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={0x0}}, 0x0) [ 974.573953][T22431] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 08:41:21 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000700)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) [ 974.617821][T22431] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 974.629822][T22431] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 974.640250][T22431] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 974.653304][T22431] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 974.681117][T22431] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 974.712034][T22431] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) 08:41:22 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x44900, 0x0) 08:41:22 executing program 3: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x77359400}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20058041, &(0x7f0000000040)={0xa, 0x2}, 0x1c) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) timer_create(0x0, 0x0, &(0x7f00000002c0)) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x0, 0x0, 0x0) 08:41:22 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000f40)='/proc/schedstat\x00', 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000440)) 08:41:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 08:41:22 executing program 2: fork() write$eventfd(0xffffffffffffffff, 0x0, 0x0) 08:41:22 executing program 1: syz_mount_image$udf(&(0x7f0000000080)='udf\x00', &(0x7f0000000400)='./file0\x00', 0x8000, 0x0, &(0x7f0000000040), 0xc401, &(0x7f0000000000)) 08:41:22 executing program 5: unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) modify_ldt$read_default(0x2, &(0x7f0000000040)=""/197, 0xc5) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000001280)='ext3\x00', &(0x7f00000012c0)='./file0\x00', 0xffff, 0x2, &(0x7f0000001400)=[{&(0x7f0000001300), 0x0, 0x1c}, {0x0}], 0x2000840, &(0x7f0000001440)={[{@mblk_io_submit='mblk_io_submit'}], [{@subj_role={'subj_role', 0x3d, '/dev/full\x00'}}]}) 08:41:22 executing program 0: msgget$private(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/84}, 0x5c, 0x0, 0x3800) 08:41:22 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000001780)) [ 975.385630][T22467] loop1: detected capacity change from 0 to 64 [ 975.393893][T22467] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 975.418148][T22467] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 975.429056][T22467] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 975.441833][T22467] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 975.453031][T22467] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 975.464074][T22467] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 975.472836][T22478] loop5: detected capacity change from 0 to 127 08:41:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000004c0)={&(0x7f0000000380)=@ethernet={0x0, @link_local}, 0x80, 0x0}, 0x0) 08:41:22 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000007c0)={&(0x7f0000000780)='./file0\x00'}, 0x10) 08:41:22 executing program 4: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x19acbd11fdc420aa) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x20000000002, 0x73) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x32, 0x0, 0x0, &(0x7f0000000000), 0x18}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0506617, &(0x7f0000000040)=0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00') [ 975.480198][T22467] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 975.495310][T22478] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 975.512854][T22467] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 975.523083][T22467] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) 08:41:22 executing program 2: perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x3, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x80, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x0, 0x4, 0x5b}, 0x10}, 0x78) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030007000500154005008178a800160008000100e558110000000100000e006f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee48100000000000000d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d08fad95667e04adcdf634c1f215ce3bb53b409d5e1ca4e81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5%f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 975.667282][T22497] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 975.680683][T22497] device wlan1 entered promiscuous mode [ 975.689237][T22497] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. 08:41:23 executing program 5: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x20000000002, 0x73) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x32, 0x0, 0x0, &(0x7f0000000000), 0x18}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0506617, &(0x7f0000000040)=0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000240)=',*^:\x00') ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00') 08:41:23 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) write$cgroup_int(r3, &(0x7f0000001640), 0x12) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 08:41:23 executing program 4: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x19acbd11fdc420aa) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x20000000002, 0x73) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x32, 0x0, 0x0, &(0x7f0000000000), 0x18}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0506617, &(0x7f0000000040)=0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00') 08:41:23 executing program 2: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x19acbd11fdc420aa) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x20000000002, 0x73) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x32, 0x0, 0x0, &(0x7f0000000000), 0x18}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0506617, &(0x7f0000000040)=0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000240)=',*^:\x00') ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00') 08:41:23 executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x19acbd11fdc420aa) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x20000000002, 0x73) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x32, 0x0, 0x0, &(0x7f0000000000), 0x18}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0506617, &(0x7f0000000040)=0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00') 08:41:23 executing program 3: socketpair(0x8, 0x0, 0x0, &(0x7f0000000e00)) 08:41:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xe, 0x0, 0x0, 0x22ef, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x40) 08:41:23 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, 0x0) perf_event_open(&(0x7f00000014c0)={0x0, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x42000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='cpu>|&&!~\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7\"\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00') socket$kcm(0x2, 0x5, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000400)=""/4080, 0x1000}, {&(0x7f0000001740)=""/190, 0xffffff81}, {&(0x7f0000000080)=""/115, 0x73}], 0x3}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x40) 08:41:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x16, 0x81, 0x0, 0xcd06, 0x0, 0x1}, 0x40) 08:41:23 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x10) 08:41:23 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x490103, 0x0) 08:41:23 executing program 4: perf_event_open$cgroup(&(0x7f0000002cc0)={0x1, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 08:41:23 executing program 0: ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x10, 0x0}, 0x30) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000001640)) r2 = perf_event_open(&(0x7f00000015c0)={0x2, 0x70, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x2}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='cpu\t\t&6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xa4\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x8d\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r3 = perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x70, 0x15, 0x0, 0x8b, 0x6a, 0x0, 0x100000000, 0x12112, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb744, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x9, 0x0, 0x7, 0x0, 0xca, 0x7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) perf_event_open(0x0, 0x0, 0x0, r4, 0xa) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03G\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 08:41:23 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) write$cgroup_int(r3, &(0x7f0000001640), 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000033) 08:41:23 executing program 2: bpf$MAP_CREATE(0x9, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 08:41:23 executing program 5: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x20000000002, 0x73) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x32, 0x0, 0x0, &(0x7f0000000000), 0x18}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0506617, &(0x7f0000000040)=0x2) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)=',*^:\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) 08:41:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001900)={'wg2\x00'}) [ 976.496588][T22538] device wlan1 entered promiscuous mode 08:41:23 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) 08:41:23 executing program 2: getpgid(0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xff}}}}}]}}]}}, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) 08:41:23 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 08:41:23 executing program 4: execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)) 08:41:23 executing program 1: bind$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs={0x1, 0x0, 0x3}, 0x8) accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) pipe2(&(0x7f0000000800), 0x1000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)) 08:41:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000002880)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 08:41:23 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001ac0), 0x14) 08:41:23 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000180)={0x0}) 08:41:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x800, 0x4) 08:41:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000", @ANYRES16, @ANYBLOB="010025bd7000fbdbdf430b000000", @ANYBLOB="0c00f4"], 0x80}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010305bd7000fb00080005"], 0x80}}, 0x0) 08:41:23 executing program 1: socketpair(0x15, 0x0, 0x0, &(0x7f00000046c0)) 08:41:23 executing program 1: syz_genetlink_get_family_id$wireguard(&(0x7f00000008c0)='wireguard\x00', 0xffffffffffffffff) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004700), 0x2) [ 976.890822][T17614] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 976.900889][T18437] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 977.090826][T18437] usb 4-1: device descriptor read/64, error 18 [ 977.097045][T17614] usb 3-1: device descriptor read/64, error 18 [ 977.370837][T18437] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 977.378433][T17614] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 977.560853][T18437] usb 4-1: device descriptor read/64, error 18 [ 977.571244][T17614] usb 3-1: device descriptor read/64, error 18 [ 977.680866][T18437] usb usb4-port1: attempt power cycle [ 977.691404][T17614] usb usb3-port1: attempt power cycle [ 978.390839][T18437] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 978.401246][T17614] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 978.481106][T18437] usb 4-1: Invalid ep0 maxpacket: 0 [ 978.491823][T17614] usb 3-1: Invalid ep0 maxpacket: 0 [ 978.630873][T18437] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 978.640998][T17614] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 978.721835][T18437] usb 4-1: Invalid ep0 maxpacket: 0 [ 978.727088][T18437] usb usb4-port1: unable to enumerate USB device [ 978.733698][T17614] usb 3-1: Invalid ep0 maxpacket: 0 [ 978.738925][T17614] usb usb3-port1: unable to enumerate USB device 08:41:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001680)='TIPCv2\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 08:41:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000180)) 08:41:26 executing program 1: bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 08:41:26 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) 08:41:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x7800, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 08:41:26 executing program 2: socketpair(0x29, 0x5, 0x8, &(0x7f0000000000)) 08:41:26 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) pipe(&(0x7f0000004880)) 08:41:26 executing program 4: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) 08:41:26 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 08:41:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001600)) 08:41:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000480), 0x4) 08:41:26 executing program 3: sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 08:41:26 executing program 4: pipe(&(0x7f0000001980)) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 08:41:26 executing program 1: pipe(&(0x7f0000001780)) 08:41:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000004900)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x40000023, 0x0) 08:41:26 executing program 5: socket(0x25, 0x1, 0x3ff) 08:41:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000000), 0x4) 08:41:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 08:41:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fb5bdf080000000014"], 0x28}}, 0x0) 08:41:26 executing program 4: pipe(&(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, 0x0) 08:41:27 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 08:41:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)={0x15}, 0x40) 08:41:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$nfc_llcp(r0, 0x10e, 0xc, 0x0, 0x54005f) 08:41:27 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000140)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f00000006c0)) 08:41:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002c40)={&(0x7f0000002b40), 0xc, &(0x7f0000002c00)={0x0}}, 0x4a5aefb2188ed8fd) 08:41:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x2a) [ 980.087001][T22652] hfsplus: unable to find HFS+ superblock [ 980.153413][T22652] hfsplus: unable to find HFS+ superblock 08:41:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={0x0}}, 0x0) 08:41:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 08:41:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001900)={'wg2\x00'}) 08:41:27 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) pipe(&(0x7f0000004880)) 08:41:27 executing program 2: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x6579cabbab861d61) 08:41:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000002c0)={{0x2, 0x0, @remote}, {}, 0x0, {0x2, 0x0, @broadcast}}) 08:41:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 08:41:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 08:41:27 executing program 1: pipe(&(0x7f0000001c40)) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 08:41:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001500), 0x0, 0x0, 0x0) 08:41:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/61, 0x3d}], 0x1}}], 0x1, 0x0, &(0x7f0000001240)={0x0, 0x3938700}) 08:41:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind(r0, 0x0, 0x0) 08:41:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x39) 08:41:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40002000, &(0x7f0000006240)) 08:41:27 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x6, r0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r2) keyctl$unlink(0x9, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r3) keyctl$unlink(0x9, r3, 0xfffffffffffffffb) keyctl$read(0xb, r1, &(0x7f0000000000)=""/55, 0xffffff23) keyctl$unlink(0x9, r1, r1) 08:41:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$FUSE_POLL(r0, 0x0, 0xfffffeeb) 08:41:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') write$cgroup_type(r0, 0x0, 0x0) 08:41:28 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000640)={[], [{@obj_user={'obj_user', 0x3d, '/dev/vcs#\x00'}}]}) 08:41:28 executing program 5: capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000340)) semget(0x3, 0x0, 0x13e) 08:41:28 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r1 = shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x0) shmdt(r1) 08:41:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000040)) 08:41:28 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0x7}, 0x0) [ 981.082285][T22718] tmpfs: Unknown parameter 'obj_user' [ 981.106165][T22718] tmpfs: Unknown parameter 'obj_user' 08:41:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind(r0, &(0x7f0000000000)=@sco, 0x80) 08:41:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, &(0x7f0000001880)) 08:41:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 08:41:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') write$FUSE_IOCTL(r0, 0x0, 0x37) 08:41:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockname(r0, 0x0, &(0x7f0000000780)=0xfffffd8d) 08:41:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') write$cgroup_netprio_ifpriomap(r0, 0x0, 0x0) 08:41:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40, &(0x7f0000001880)) 08:41:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, 0x0, 0x0) 08:41:28 executing program 1: pipe2(&(0x7f0000012e80)={0xffffffffffffffff}, 0x0) read$char_usb(r0, &(0x7f0000006d80)=""/66, 0x42) 08:41:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000017c0), 0x0, 0x40, &(0x7f0000001880)) 08:41:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffef0) 08:41:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40, 0x0) 08:41:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000006240)) 08:41:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 08:41:28 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 08:41:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 08:41:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0xfffffffffffffdff) 08:41:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockname(r0, 0x0, &(0x7f0000000780)) 08:41:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$FUSE_STATFS(r0, &(0x7f00000020c0)={0x60}, 0x60) 08:41:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, &(0x7f0000006240)) 08:41:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000a40)=0xb241, 0x4) 08:41:29 executing program 0: unshare(0xc000200) 08:41:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001500), 0x0, 0x60, 0x0) 08:41:29 executing program 4: capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000340)) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, 0x0) 08:41:29 executing program 5: syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="000400000100010044000000ffffff7f6824", 0x12, 0x400}, {&(0x7f0000000780)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103", 0x783, 0x880}, {0x0, 0x0, 0x11000}], 0x403, &(0x7f0000000080)=ANY=[]) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x280020, &(0x7f00000005c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 08:41:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000440)={'syztnl1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) 08:41:29 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x105002, 0x0) 08:41:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001380)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0xf}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c, 0x0}}], 0x2, 0xfe80) [ 982.784468][T22793] loop5: detected capacity change from 0 to 272 08:41:29 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) 08:41:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x3, &(0x7f0000000b40)=@framed, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d00), 0x10}, 0x78) [ 982.852726][T22793] MINIX-fs: mounting unchecked file system, running fsck is recommended 08:41:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x0, 0x0, 0x0, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:41:30 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000900)={'sit0\x00', 0x0}) 08:41:30 executing program 0: syz_open_dev$radio(0x0, 0x0, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) 08:41:30 executing program 5: getresgid(&(0x7f0000002680), &(0x7f00000026c0), 0x0) 08:41:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x1c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 08:41:30 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000002340)='/dev/hidraw#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000080)=ANY=[@ANYBLOB]) 08:41:30 executing program 4: getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0) 08:41:30 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 08:41:30 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000002d00), 0x4) 08:41:30 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz1\x00', 0x200002, 0x0) 08:41:30 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x3, &(0x7f0000000b40)=@framed, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:41:30 executing program 2: getrusage(0x0, &(0x7f0000000e40)) 08:41:30 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000240)={[{@fat=@check_strict='check=strict'}]}) statx(r0, &(0x7f0000003740)='./file0/file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x8ac2, 0x0) 08:41:30 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f00000005c0)) 08:41:30 executing program 5: socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 08:41:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000000)=0x1, 0x4) 08:41:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) [ 983.332320][T20722] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 983.730916][T20722] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.743345][T20722] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.756157][T20722] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 983.767320][T20722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.330949][T20722] usbhid 2-1:1.0: can't add hid device: -71 [ 984.338072][T20722] usbhid: probe of 2-1:1.0 failed with error -71 [ 984.346200][T20722] usb 2-1: USB disconnect, device number 14 [ 985.010892][T17614] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 985.371271][T17614] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.382582][T17614] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.393902][T17614] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 985.403252][T17614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 08:41:32 executing program 1: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000880)={'ip6tnl0\x00', 0x0, 0x2f, 0x9f, 0x20, 0x5, 0x21, @ipv4={[], [], @private=0xa010101}, @mcast1, 0x7830, 0x7800, 0x2f25fc77}}) 08:41:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='H'], 0x34}}, 0x0) 08:41:32 executing program 5: futex(&(0x7f00000015c0), 0xb, 0x0, &(0x7f0000001600), 0x0, 0x0) 08:41:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @remote}, 'veth0_virt_wifi\x00'}) 08:41:32 executing program 3: sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x0) socket(0x9, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x28001, 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_complete(0x0) syz_mount_image$affs(&(0x7f0000001580)='affs\x00', &(0x7f00000015c0)='./file0\x00', 0x0, 0x2, &(0x7f0000002800)=[{&(0x7f0000001600)='\r', 0x1, 0x2}, {&(0x7f0000001680)="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", 0xffe, 0x3}], 0x1000, &(0x7f0000002880)) 08:41:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) 08:41:32 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, 0x0) [ 985.781391][T17614] usbhid 2-1:1.0: can't add hid device: -71 [ 985.804316][T17614] usbhid: probe of 2-1:1.0 failed with error -71 [ 985.820704][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:41:32 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x2) write$midi(r0, &(0x7f00000000c0)="c51fdad6da4a242492d899af4c9af37d0cd307a867eb6d4421ee41a141e54470bb19d1938935015da01591a6b2dcef388661ada185a1ea6414d603a94aef8cfe6190b486a8a61162153015c0d6ad83e6c5d3e0f89df5894bf6aca96ae0df2558d1c830688503a3ae072bd48c03e3a599de92181da43e2deecc85de47af8bbc1c2bd1e921dac97610df8cde2867603b96860e5071adea192e9b241ca3c257067c0d313b166cb2f54b3bc8297771729abe96994307a2023cb9c25bfc8586d60629330afa4330af08e0e080504648c346c201fd57a38b4e1a86fc6baeea", 0xffffffffffffff1b) 08:41:32 executing program 3: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50}, 0x50) fallocate(r0, 0x20, 0x0, 0xfffffeff000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x27) fallocate(r0, 0x0, 0x0, 0x10000101) 08:41:32 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/mcfilter\x00') readv(r0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/53, 0x35}], 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 985.837144][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 985.846522][T17614] usb 2-1: USB disconnect, device number 15 08:41:32 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x0) read$midi(r0, 0x0, 0x0) 08:41:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:33 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000580)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000ffff, 0x0) 08:41:33 executing program 4: creat(&(0x7f00000001c0)='./file0\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) 08:41:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}}, 0x0) 08:41:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002c40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x22f3860e17ab3ef1) [ 986.051867][ T36] audit: type=1800 audit(1615797693.069:249): pid=22925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=14913 res=0 errno=0 08:41:33 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 08:41:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000980)={&(0x7f00000008c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x28}}, 0x0) 08:41:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:33 executing program 1: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 08:41:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000100)) 08:41:33 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) 08:41:33 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000580)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000ffff, 0x0) 08:41:33 executing program 1: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) [ 986.371057][ T3244] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.377378][ T3244] ieee802154 phy1 wpan1: encryption failed: -22 08:41:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000080)) 08:41:33 executing program 1: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 08:41:33 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 08:41:33 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), 0x4) 08:41:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:34 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x0, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000580)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000ffff, 0x0) 08:41:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @window, @sack_perm, @mss], 0x4) 08:41:34 executing program 1: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 08:41:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:34 executing program 0: creat(&(0x7f00000001c0)='./file0\x00', 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 08:41:34 executing program 5: creat(&(0x7f0000000040)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000004c0)='rdma.current\x00', 0x0, 0x0) syncfs(r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="18000000b22801df14f0f00090b17127c35b584879015fdc3be40c008b9ebb40e0293a97e2ea", @ANYRES16=0x0, @ANYBLOB="380200000000fcdbdf25080000001400060076657468305f766c616e000000000000"], 0x28}}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000340)='cgroup.stat\x00', 0x0, 0x0) pipe(0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="11c3d7bd7000fbdbdfbdfc9ef80004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4040055}, 0x5) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x65, 0x7fff, 0x6, @remote, @mcast1, 0x700, 0x8, 0x3ff, 0x1f}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x69a}]}, 0x28}}, 0x0) 08:41:34 executing program 1: perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="c4c37d05a4c02b9f00000066b8bd000f00d066b8ac000f00d8c4437d48f9570f21e4b805000000b9231600000f01d90f3066ba4000edc7442400ef000000c74424026b074121ff1c2466ba2100ec", 0x4e}], 0x1, 0x28, &(0x7f0000000180)=[@cr0], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:34 executing program 0: creat(&(0x7f00000001c0)='./file0\x00', 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 08:41:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:34 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 08:41:34 executing program 0: creat(&(0x7f00000001c0)='./file0\x00', 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 08:41:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:34 executing program 4: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usbip_server_init(0x0) write$usbip_server(r0, 0x0, 0x0) 08:41:34 executing program 0: creat(&(0x7f00000001c0)='./file0\x00', 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 08:41:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) 08:41:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:34 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 08:41:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000), &(0x7f0000000040)=0x8) [ 987.958257][T23068] binder: 23059:23068 unknown command 0 [ 987.984839][T23068] binder: 23059:23068 ioctl c0306201 20000200 returned -22 [ 988.033221][T23076] binder: 23059:23076 unknown command 0 [ 988.053435][T23076] binder: 23059:23076 ioctl c0306201 20000200 returned -22 [ 988.107289][T23025] debugfs: Directory '23025-5' with parent 'kvm' already present! 08:41:35 executing program 1: perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="c4c37d05a4c02b9f00000066b8bd000f00d066b8ac000f00d8c4437d48f9570f21e4b805000000b9231600000f01d90f3066ba4000edc7442400ef000000c74424026b074121ff1c2466ba2100ec", 0x4e}], 0x1, 0x28, &(0x7f0000000180)=[@cr0], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200), &(0x7f0000000240)=0x4) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) 08:41:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:35 executing program 3: socket(0x22, 0x0, 0xfffffffe) [ 988.335452][T23093] sctp: [Deprecated]: syz-executor.0 (pid 23093) Use of int in max_burst socket option. [ 988.335452][T23093] Use struct sctp_assoc_value instead [ 988.352442][T23092] binder: 23088:23092 unknown command 0 08:41:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 988.377033][T23092] binder: 23088:23092 ioctl c0306201 20000200 returned -22 [ 988.401488][T23093] sctp: [Deprecated]: syz-executor.0 (pid 23093) Use of int in max_burst socket option. [ 988.401488][T23093] Use struct sctp_assoc_value instead [ 988.408880][T23100] binder: 23088:23100 unknown command 0 [ 988.433264][T23100] binder: 23088:23100 ioctl c0306201 20000200 returned -22 08:41:35 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2002, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 08:41:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f630c40000000000000000000bb"], 0x0, 0x0, 0x0}) 08:41:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x24}}, 0x0) 08:41:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 988.566438][T23117] binder: 23111:23117 unknown command 0 [ 988.594653][T23117] binder: 23111:23117 ioctl c0306201 20000200 returned -22 08:41:36 executing program 1: perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="c4c37d05a4c02b9f00000066b8bd000f00d066b8ac000f00d8c4437d48f9570f21e4b805000000b9231600000f01d90f3066ba4000edc7442400ef000000c74424026b074121ff1c2466ba2100ec", 0x4e}], 0x1, 0x28, &(0x7f0000000180)=[@cr0], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:36 executing program 0: syz_mount_image$fuse(&(0x7f0000005d80)='fuse\x00', &(0x7f0000005dc0)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000005e00)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id'}}) 08:41:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:36 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x0) read$midi(r0, &(0x7f0000000080)=""/72, 0x48) 08:41:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0), 0xe) [ 989.223023][T23140] binder: 23138:23140 unknown command 0 [ 989.232141][T23140] binder: 23138:23140 ioctl c0306201 20000200 returned -22 08:41:36 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000580)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000ffff, 0x0) 08:41:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) [ 989.273753][T23149] fuse: Bad value for 'fd' [ 989.291243][T23149] fuse: Bad value for 'fd' 08:41:36 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000580)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000ffff, 0x0) 08:41:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:36 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f000010000000000006001400d000020004", 0x1d}], 0x0, &(0x7f0000010300)=ANY=[]) [ 989.357462][T23157] binder: 23156:23157 unknown command 0 [ 989.368081][T23157] binder: 23156:23157 ioctl c0306201 20000200 returned -22 08:41:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) [ 989.523821][T23175] binder: 23174:23175 unknown command 0 [ 989.536070][T23175] binder: 23174:23175 ioctl c0306201 20000200 returned -22 08:41:37 executing program 1: perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="c4c37d05a4c02b9f00000066b8bd000f00d066b8ac000f00d8c4437d48f9570f21e4b805000000b9231600000f01d90f3066ba4000edc7442400ef000000c74424026b074121ff1c2466ba2100ec", 0x4e}], 0x1, 0x28, &(0x7f0000000180)=[@cr0], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5001000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000001000a0001006e6574656d00000020010200ca050000b00e0000050000000000000000000000ff000000110002"], 0x150}}, 0x0) 08:41:37 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/211}, {&(0x7f0000000540)=""/239}, {&(0x7f0000000640)=""/140}, {&(0x7f0000000700)=""/227}], 0x2f2, 0x0, 0x0) 08:41:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:37 executing program 3: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}, @private0}}) 08:41:37 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xc, 0x0, 0x0, @generic}) 08:41:37 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)) 08:41:37 executing program 0: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffe01, 0x44c3) 08:41:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:37 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@raw={0xfe, 0x0, "cc5dcd905b9d"}) 08:41:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 990.439208][T23221] binder: 23218:23221 unknown command 0 [ 990.463139][T23221] binder: 23218:23221 ioctl c0306201 20000200 returned -22 08:41:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:38 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000980)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) 08:41:38 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 08:41:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 08:41:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x3c00, 0x0) 08:41:38 executing program 4: socketpair(0x2, 0xa, 0x7, 0x0) 08:41:38 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 08:41:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:38 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, 0x0}, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000580)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000ffff, 0x0) 08:41:38 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:38 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001480)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000015c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8e952d06"}, 0x0, 0x0, @planes=0x0}) 08:41:38 executing program 4: socket(0x3, 0x0, 0x7ff) 08:41:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 991.341008][T23275] binder: 23272:23275 unknown command 0 [ 991.353106][T23275] binder: 23272:23275 ioctl c0306201 20000200 returned -22 08:41:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000900)={0x10, 0x0, &(0x7f0000000700)=[@clear_death={0x400c630f, 0x2}], 0x1, 0x0, &(0x7f0000000880)='h'}) 08:41:38 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000d40)='devlink\x00', 0xffffffffffffffff) 08:41:38 executing program 4: futex(0x0, 0xb, 0x0, &(0x7f0000001600), &(0x7f0000001640), 0x0) 08:41:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:38 executing program 4: r0 = socket(0x2, 0x3, 0xd) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0xd0000e0}, 0x4e) 08:41:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0xfffffe0d) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 08:41:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[{0x10}], 0x10}}], 0x1, 0x0) [ 991.998457][T23297] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! 08:41:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f00000002c0)=[@dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000380)="c7"}) 08:41:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:39 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) 08:41:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:39 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000980)=[@in6={0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, [], 0x1}, 0x5}, @in6={0xa, 0x4e22, 0x0, @dev, 0x3}], 0x38) 08:41:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) [ 992.145496][T23309] binder: 23308:23309 unknown command 0 [ 992.145512][T23309] binder: 23308:23309 ioctl c0306201 20000200 returned -22 [ 992.154202][T23309] binder: 23308:23309 unknown command 0 [ 992.175433][T23309] binder: 23308:23309 ioctl c0306201 20000200 returned -22 08:41:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:39 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="e8000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000008900000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000c0001d80bc000080b8000d805800028014000300000000000000070000000000000000001400030000000000000000000000000000000000140003000000000000000000000000000000000005000400000000000d0001000000000000000000000000000c000280"], 0xe8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="340100002d270a196b90", @ANYBLOB="00022dbd7000fddbdf253f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900e3e900006aa80041078e9e526d00000074005e8820000100018000000400000081000000000100008fb6000006000000ff7e000008000700780000002006010002000000040000000600000003000000fbff03000000000008000300030000000800020003000000080003000210000008000300af0e00002c005e800800020000040000080005004f000000081a09000200000008000600f6ffffff0800055e72623d001c005e8008000700e600fe7f000002000700000008000700b90000002c005e8008002f096883"], 0x134}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=ANY=[@ANYBLOB="88040000", @ANYRES16=r0, @ANYBLOB="010025bd7000fe9bdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e006604330080280300080211000001080211"], 0x488}}, 0x0) 08:41:39 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000680)=@sack_info={r2}, &(0x7f00000006c0)=0xc) 08:41:39 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x40800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xd3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) sync() [ 992.414671][ C0] sd 0:0:1:0: [sg0] tag#4741 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 992.414712][ C0] sd 0:0:1:0: [sg0] tag#4741 CDB: Test Unit Ready [ 992.414732][ C0] sd 0:0:1:0: [sg0] tag#4741 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.414751][ C0] sd 0:0:1:0: [sg0] tag#4741 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.414769][ C0] sd 0:0:1:0: [sg0] tag#4741 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.414788][ C0] sd 0:0:1:0: [sg0] tag#4741 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.414805][ C0] sd 0:0:1:0: [sg0] tag#4741 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.414822][ C0] sd 0:0:1:0: [sg0] tag#4741 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.414839][ C0] sd 0:0:1:0: [sg0] tag#4741 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.414878][ C0] sd 0:0:1:0: [sg0] tag#4741 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.414898][ C0] sd 0:0:1:0: [sg0] tag#4741 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.414916][ C0] sd 0:0:1:0: [sg0] tag#4741 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.414934][ C0] sd 0:0:1:0: [sg0] tag#4741 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.414951][ C0] sd 0:0:1:0: [sg0] tag#4741 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.414982][ C0] sd 0:0:1:0: [sg0] tag#4741 CDB[c0]: 00 00 00 00 00 00 00 00 [ 992.495613][ C1] sd 0:0:1:0: [sg0] tag#4781 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 992.599277][ C1] sd 0:0:1:0: [sg0] tag#4781 CDB: Test Unit Ready [ 992.599299][ C1] sd 0:0:1:0: [sg0] tag#4781 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.599319][ C1] sd 0:0:1:0: [sg0] tag#4781 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.624859][ C1] sd 0:0:1:0: [sg0] tag#4781 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.624881][ C1] sd 0:0:1:0: [sg0] tag#4781 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.624898][ C1] sd 0:0:1:0: [sg0] tag#4781 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.624914][ C1] sd 0:0:1:0: [sg0] tag#4781 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.624928][ C1] sd 0:0:1:0: [sg0] tag#4781 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.624947][ C1] sd 0:0:1:0: [sg0] tag#4781 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.624967][ C1] sd 0:0:1:0: [sg0] tag#4781 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.624980][ C1] sd 0:0:1:0: [sg0] tag#4781 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.624995][ C1] sd 0:0:1:0: [sg0] tag#4781 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.625009][ C1] sd 0:0:1:0: [sg0] tag#4781 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.625026][ C1] sd 0:0:1:0: [sg0] tag#4781 CDB[c0]: 00 00 00 00 00 00 00 00 08:41:39 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0xe8, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc0, 0x11d, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_HT={0x4}]}]}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24008015}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=ANY=[@ANYBLOB="88040000", @ANYRES16=r0, @ANYBLOB="010025bd7000fe9bdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e006604330080280300080211000001080211"], 0x488}}, 0x0) 08:41:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x40, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x101042, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x80001d00c0d0) readahead(r1, 0x0, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x0, 0x20, 0x7, 0x1}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) close(r2) dup(r0) sendfile(r2, r0, 0x0, 0x80001d00c0d0) 08:41:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 993.073070][T23352] ================================================================== [ 993.081213][T23352] BUG: KCSAN: data-race in __writeback_single_inode / ext4_sync_file [ 993.089294][T23352] [ 993.091631][T23352] write to 0xffff888070250b58 of 8 bytes by task 23360 on cpu 0: [ 993.099344][T23352] __writeback_single_inode+0x1e9/0x4d0 [ 993.104921][T23352] writeback_single_inode+0x122/0x580 [ 993.110300][T23352] sync_inode_metadata+0x52/0x70 [ 993.115240][T23352] ext4_sync_file+0x359/0x6e0 [ 993.119950][T23352] vfs_fsync_range+0x107/0x120 [ 993.124717][T23352] ext4_buffered_write_iter+0x38f/0x3e0 [ 993.131227][T23352] ext4_file_write_iter+0x48a/0x10b0 [ 993.136520][T23352] do_iter_readv_writev+0x2cb/0x360 [ 993.141713][T23352] do_iter_write+0x112/0x4c0 [ 993.146305][T23352] vfs_iter_write+0x4c/0x70 [ 993.150808][T23352] iter_file_splice_write+0x40a/0x750 [ 993.156184][T23352] direct_splice_actor+0x80/0xa0 [ 993.161146][T23352] splice_direct_to_actor+0x345/0x650 [ 993.166520][T23352] do_splice_direct+0xf5/0x170 [ 993.171303][T23352] do_sendfile+0x7a6/0xe20 [ 993.175718][T23352] __x64_sys_sendfile64+0xf2/0x130 [ 993.180827][T23352] do_syscall_64+0x39/0x80 [ 993.185242][T23352] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 993.191136][T23352] [ 993.193454][T23352] read to 0xffff888070250b58 of 8 bytes by task 23352 on cpu 1: [ 993.201074][T23352] ext4_sync_file+0x294/0x6e0 [ 993.205763][T23352] vfs_fsync_range+0x107/0x120 [ 993.210536][T23352] ext4_buffered_write_iter+0x38f/0x3e0 [ 993.216093][T23352] ext4_file_write_iter+0x48a/0x10b0 08:41:40 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000680)=@sack_info={r2}, &(0x7f00000006c0)=0xc) 08:41:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:40 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={@ipv4={[], [], @multicast2}, 0x0, r1}) [ 993.221561][T23352] do_iter_readv_writev+0x2cb/0x360 [ 993.226758][T23352] do_iter_write+0x112/0x4c0 [ 993.231957][T23352] vfs_iter_write+0x4c/0x70 [ 993.236459][T23352] iter_file_splice_write+0x40a/0x750 [ 993.241840][T23352] direct_splice_actor+0x80/0xa0 [ 993.246777][T23352] splice_direct_to_actor+0x345/0x650 [ 993.252142][T23352] do_splice_direct+0xf5/0x170 [ 993.257006][T23352] do_sendfile+0x7a6/0xe20 [ 993.261418][T23352] __x64_sys_sendfile64+0xf2/0x130 [ 993.266528][T23352] do_syscall_64+0x39/0x80 [ 993.270947][T23352] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 993.276843][T23352] [ 993.279165][T23352] Reported by Kernel Concurrency Sanitizer on: [ 993.285330][T23352] CPU: 1 PID: 23352 Comm: syz-executor.0 Not tainted 5.12.0-rc2-syzkaller #0 [ 993.294094][T23352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.304179][T23352] ================================================================== 08:41:40 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x7f) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000280)=0x8000) 08:41:40 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40000042) 08:41:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000680)=@sack_info={r2}, &(0x7f00000006c0)=0xc) 08:41:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:40 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, 0x0, 0xd3) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000540)={0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) sync() socket$nl_netfilter(0x10, 0x3, 0xc) 08:41:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}, 0x0) recvfrom$unix(r1, &(0x7f0000000000)=""/196, 0xc4, 0x0, &(0x7f0000000100)=@abs, 0x6e) 08:41:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x40, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x101042, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x80001d00c0d0) readahead(r1, 0x0, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x0, 0x20, 0x7, 0x1}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) close(r2) dup(r0) sendfile(r2, r0, 0x0, 0x80001d00c0d0) 08:41:40 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000)) 08:41:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:41 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x40, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x101042, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x80001d00c0d0) readahead(r1, 0x0, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x0, 0x20, 0x7, 0x1}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) close(r2) dup(r0) sendfile(r2, r0, 0x0, 0x80001d00c0d0) 08:41:41 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 08:41:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 08:41:41 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) getsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 08:41:41 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 08:41:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000", @ANYRES16, @ANYBLOB="010025bd7000fbdbdf430b00000008000300", @ANYBLOB='\f'], 0x80}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010305bd7000fb00080005"], 0x80}}, 0x0) 08:41:41 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x40800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xd3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sync() socket$nl_netfilter(0x10, 0x3, 0xc) 08:41:41 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 08:41:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 994.357083][T23448] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 08:41:41 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x68, r0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x45, 0x33, @probe_response={@wo_ht={{}, {}, @device_a, @device_a, @from_mac=@device_b, {0x0, 0x2d2}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @void, @void, @val={0x71, 0x7}, [{0xdd, 0x6, "d428520a7542"}]}}]}, 0x68}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=ANY=[@ANYBLOB="88040000", @ANYRES16=r0, @ANYBLOB="010025bd7000fe9bdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e006604330080280300080211000001080211"], 0x488}}, 0x0) 08:41:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:42 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 08:41:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 08:41:42 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000e40)) 08:41:42 executing program 4: migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000040)) 08:41:42 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0xfffffffffffffffd) 08:41:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x800, 0x0, 0x25dfdbff, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x3f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}]}, 0x48}}, 0x0) 08:41:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:42 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 08:41:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:42 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 08:41:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 08:41:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:42 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 08:41:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:42 executing program 5: syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:42 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) [ 995.485129][T23527] binder: 23521:23527 unknown command 0 [ 995.490926][T23527] binder: 23521:23527 ioctl c0306201 20000200 returned -22 08:41:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:43 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) 08:41:43 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) 08:41:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:43 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:43 executing program 5: syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:43 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) 08:41:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x129, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_b, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) 08:41:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:43 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xa}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81", 0x4a}], 0x2, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:43 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 08:41:43 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) splice(r0, 0x0, r2, 0x0, 0x100000000, 0x0) 08:41:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', r0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) r2 = open(&(0x7f0000000540)='./file0/file0\x00', 0x102440, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000001c0)=ANY=[@ANYBLOB="0900000000000066d331e1d407d3b10000"]) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="c2b7f5a67ba3595aadbe977dc1fe140ec0b702b4ead095d0b0420a9aebcd76fa1509ae0a223fbdc4abecdc87ca69482cc7d9ab4af42a5cda4a65d4fa813425f0910e5795483e92c6bef60d704a8c0356c82625085fc5a490b5d42a9454c1cda628f3aea85b6ba77c239d548f9e9e94353c7ce4b3cf0fa9b99aeeca890b31a9dc1fbf49c527b22e000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x40000) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000000)=0x360, 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x4000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x4, 0x30, 0x5, 0x1, 0x54, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000, 0x40, 0x800, 0x6}}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getqdisc={0x34, 0x26, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0x6}, {0xd, 0x9}, {0xa, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x80010) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r8, 0x400, 0x0) poll(&(0x7f00000005c0)=[{r0, 0x6400}, {0xffffffffffffffff, 0x52}, {0xffffffffffffffff, 0x40}, {r3, 0xc0}, {0xffffffffffffffff, 0x8}, {r6, 0x3000}, {r7, 0x9010}, {r8, 0x4}], 0x8, 0x2) 08:41:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20044086) [ 996.407158][T23581] binder: 23573:23581 unknown command 0 [ 996.440666][T23581] binder: 23573:23581 ioctl c0306201 20000200 returned -22 08:41:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x8c, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x60008850) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffff7e, &(0x7f0000000180)={0x0}}, 0x0) bind(r5, &(0x7f0000007b40)=@vsock={0x28, 0x0, 0x2710}, 0x80) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x73) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="8100000000000000280012000900010076657468"], 0x48}}, 0x0) r7 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x300f828, [], [{}, {0x801, 0x0, 0x80000001}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000007d40)={'syztnl2\x00', &(0x7f0000007cc0)={'syztnl0\x00', r6, 0x29, 0x0, 0x9, 0x8, 0x62, @mcast1, @remote, 0x7800, 0x10, 0xcc, 0x4}}) sendmsg$nl_route(r3, &(0x7f0000007e40)={&(0x7f0000007bc0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000007e00)={&(0x7f0000007d80)=@newlink={0x60, 0x10, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc692}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_MAP={0x20, 0xe, {0x8, 0x396, 0x2, 0x91ee, 0x1, 0x26}}, @IFLA_NET_NS_FD={0x8, 0x1c, r7}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007ed8d5fa4a20500c50900000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) [ 996.542488][T23598] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 08:41:44 executing program 5: syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:44 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 08:41:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffff7e, &(0x7f0000000180)={0x0}}, 0x0) bind(r5, &(0x7f0000007b40)=@vsock={0x28, 0x0, 0x2710}, 0x80) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x73) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="8100000000000000280012000900010076657468"], 0x48}}, 0x0) r7 = creat(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x8ad6, 0x300f828, [], [{}, {0x801, 0x0, 0x80000001}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000007d40)={'syztnl2\x00', &(0x7f0000007cc0)={'syztnl0\x00', r6, 0x29, 0x0, 0x9, 0x8, 0x62, @mcast1, @remote, 0x7800, 0x10, 0xcc, 0x4}}) sendmsg$nl_route(r3, &(0x7f0000007e40)={&(0x7f0000007bc0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000007e00)={&(0x7f0000007d80)=@newlink={0x60, 0x10, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc692}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_MAP={0x20, 0xe, {0x8, 0x396, 0x2, 0x91ee, 0x1, 0x26}}, @IFLA_NET_NS_FD={0x8, 0x1c, r7}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007ed8d5fa4a20500c50900000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtfilter={0x24, 0x25, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000000c00)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c40)={0x234, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000010}, 0x8041) 08:41:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:44 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)='fS\a\x00', 0x4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) exit_group(0x0) 08:41:44 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) [ 997.254690][T23618] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:41:44 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)='fS\a\x00', 0x4}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, &(0x7f0000001900), 0x1, &(0x7f00000048c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 08:41:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x6}}]}]}, 0x34}, 0x1, 0x200000000000000}, 0x0) 08:41:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 997.322483][T23629] binder: 23624:23629 unknown command 0 [ 997.340541][T23629] binder: 23624:23629 ioctl c0306201 20000200 returned -22 08:41:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)='fS\a', 0x3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) exit_group(0x0) 08:41:44 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 08:41:44 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)='M', 0x1}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 08:41:45 executing program 1: iopl(0x1) r0 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r0, 0x400, 0x0) 08:41:45 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:45 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 08:41:45 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 08:41:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)='M', 0x1}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 08:41:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}]}, 0x34}}, 0x0) r2 = signalfd(r0, &(0x7f00000002c0)={[0x83]}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180)='wireguard\x00', 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x4bc, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x64, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "38e42478c4bf52e9614a4787b079744afb8ae0dbb8f1f5fa18029a0a7a8099ed"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}, {0x4}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}, @WGDEVICE_A_PEERS={0x428, 0x8, 0x0, 0x1, [{0x1b4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x18c, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "597891c1413843b89ff7d2049cf20ba34f40c8046982b49523b1f8c31174c6ff"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}, {0x1f8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x184, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0xf}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0x4bc}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1000}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0xb473d9a38012e855}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a='\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000025c0)={'syztnl0\x00', &(0x7f0000002540)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x3, 0x5, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x700, 0x7800, 0x1, 0x7}}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000026c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x4c, r8, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8, 0x1, r9}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_VERSION={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x801) 08:41:45 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 08:41:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)='M', 0x1}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 998.208533][T23673] smc: net device wg0 applied user defined pnetid SYZ0 [ 998.225836][T23677] binder: 23668:23677 unknown command 0 [ 998.247904][T23673] smc: net device wg0 erased user defined pnetid SYZ0 08:41:45 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 08:41:45 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) [ 998.260834][T23677] binder: 23668:23677 ioctl c0306201 20000200 returned -22 08:41:45 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 08:41:45 executing program 0: iopl(0x1) r0 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x4, @local}], 0x3c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x90) 08:41:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000380)="66530700ae", 0x5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, &(0x7f0000001900), 0x1, &(0x7f00000048c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 08:41:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)='fS', 0x2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, &(0x7f0000001900), 0x1, &(0x7f00000048c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 08:41:46 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:46 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 08:41:46 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 08:41:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)='fS', 0x2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, &(0x7f0000001900), 0x1, &(0x7f00000048c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 08:41:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 08:41:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="66530700ae897094e71b0f49809e9c9ce3fb", 0x12}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) exit_group(0x0) 08:41:46 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 08:41:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}]}, 0x34}, 0x1, 0x0, 0x400300}, 0x0) 08:41:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)='fS', 0x2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, &(0x7f0000001900), 0x1, &(0x7f00000048c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 08:41:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 08:41:46 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="288454f761675b5fff01"], 0x16) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 999.136668][T23722] binder: 23715:23722 unknown command 0 [ 999.146495][T23722] binder: 23715:23722 ioctl c0306201 20000200 returned -22 08:41:46 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 08:41:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)='fS', 0x2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, &(0x7f0000001900), 0x1, &(0x7f00000048c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) exit_group(0x0) 08:41:46 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04630440020000000c6300000e630c400000000000000000000000000e630c400300000000000000000000000563044001000000056304400100000009631040"], 0x1, 0x0, &(0x7f00000002c0)='2'}) 08:41:46 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 08:41:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 08:41:46 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 08:41:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x1, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r2, 0x400, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000002180)="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", 0x1060}, {&(0x7f0000000180)="3c8a818e1824bce971fcf8e36a2def8f533b7ac4199f014dbd26095466fc7f75795357f3b27fb79b07fc3319f1eae8e88f173d752885a7dfd5cb90825942a0a7d8f98af93aaa50faec210402523c495439a96f7b723561b2b607dd706daed9038b546d6d7762dbd140f2659a9cd38e", 0x6f}], 0x2, 0x7) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 08:41:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x52082400, &(0x7f00000013c0)="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", &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)="ce2b016c526d5ef80f8403f439ca0c871f702527c21eaf1bfd83e10973e17bc09b626b745cbee6c78896b7b2f7012f72caba30367d88f5b0414319b407cf9397bd3d204e8937ee3ed845ea8ced6b4bdde2ecbd67cf2059d0fa785d556384bbadbdaddbd362197a894db842af768e8a7faa0d126b557789b9dbd479d52780d28c039e98bf80ff872f4547fb56e9c521db7c62152302d1131224d2e39df362693dd9b6841d802467f24c96496602381b1d1ae7dc9fab7eb779611e905135857a4c69b0fd4e60413c62917f8676ebc793b7e8b50a117fb7c6aebcb373d064") r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="66530700ae897094e71b0f49809e9c9ce3fb6c278d812c66538d750f6ee1d001f43f0500bb9fb145f2d1eaa351c948af", 0x30}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) r1 = open(&(0x7f0000000040)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000000)={0x0, &(0x7f00000003c0)=""/4096}) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 08:41:47 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)='fS', 0x2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, &(0x7f0000001900), 0x1, &(0x7f00000048c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) exit_group(0x0) 08:41:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) exit_group(0x0) 08:41:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) exit_group(0x0) 08:41:47 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0xfef0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 08:41:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="6653070001007094e71b0f49809e9c9ce3fb2c278d812c66", 0x18}, {&(0x7f00000003c0)="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", 0x115}], 0x5, 0x0) clone(0x40000, &(0x7f0000000500)="7f73d0445ad41a5a5092b795bb7b3a2227edf0d6de2d21dadef8750da83fff8dc8724db5f9e612aa2a5ff8e47d50fbb98d67d5ceab7cfaf33c5843e93f9c48dd125ddf12914485b1582ae489952be7c50bbc2d659b06419c3c51bbc8425b304aac79e6a795a5b37a9332fcb09d4d947ef353323f92926794edc6314ede4a54865a4f07f3eddb4c52e30d04a0473e97244bc249c777934a67c8f8856081e6027ffd105679f4433549fe874ac3ee97b54af4b5c6a04ba21a2c2e0d6e34c6c3a12f53c52edb227b3b9499b91bf3016f6e5bbee1644e3612e88da94fc26617ddf2cbd7a33611f8df74e2bb959e38b90c862d73b53453b7d4ae84b80a8caec08d971b1c6bc74288b6b95b2866757069f0aecad6777b5b87fe6366dd79dde28b002ad8a3bd29222778e123dd9abc3f4b7e75caa9952db5adbc5a0c66eaa1f4dad6d6053708abc88d422de83fead6a0dfb4bcfaa92c3939aeea026240f6c4ccc7971fa603061e0979f2cb076498ae1b302eba8e7eec710999581cbbb6cf65b678236a31cf0ad5d6a01a4778d7da4794b5ce257699e68dbeefda956f2acbedfc735a759b2f3b5f55deb62f253c6425dd551db80aaf699eb214a22d9ed3476db821eb73888c0269d0e98aa51136e9c25273bc46a534d44cd0ce99331c9d55b5c842288793484bc5dc299a80ab3fcde6748f7b9c180921b5b6e0bd5f2ff437bc3a99023e9e8faa0b2c3b5c5d52aacdbb69f40065019d00806bccfd7612b9124b9ddc4e50d1c26237946b0c47fef2f31a57dc6cc36dfdaa88e2591a5e47696f9dd077e1802a649f6daeefe9a4dbf056b92968875bebb91524ca55129d842e6280acb93c143b6d7a70930dc84452f4f78b804802ba4693f3dcfd369bcda900daa6575a2fbb8301cba26bf0ab02461bafb4e30773dcf799a5d980539a0e84d01ac38731fdab38d379f81f02748ced990f5582285b2081575da1fa5b1f526b77f72c67398568658496113458c81cc1d0cff70a06b66a67dcbe41fb62511e92d76737a09cc842a1f53cc739ab1beb1729a2f6fd06da4dd35691133c6f740249a3c52e685b92fb99285f9aaaf915065eb63ffbaad24e4c3254554a56cf55898c601902822d9530b9c6cbdca3e6089110ccd4054d0c4baa0fb326b06da75499f14db5593235cf379a1033bc81c2cefc1adc07a856ddfe0ff3df99f324829e6d5ce57c0579b6ffa378568058ac810f6dc5eba4d2ea9c6707ebb3e9d6f891712e22cbd2d9178072da5d04bd16037518bfaa44bc19f1d5d0fa64192f8150274ab86831bda38ebadd791400456e67c280824d6ea6baa33cedf755650db2a60904d7cce45edb1c1a4701238776661bed2627b70426125c96f414e651f6a0aa8c7583d3913586702e70e73a72b194e116aac9f56d1ffced6ec23edc8783fab713408a16e2169f6a577c757c0fb5e6f1f29e9a3eadc8a28486139cab02c712af4c27b3daa624f81c9646d7d935bd2634e17466c075226b753e743b658d129caa3d19242f65829d487694def35a7802da0828ffd8be3429e9aed1e741bcc5e99c3e22fdf151984241591b9c9e9deac52e81e0f1182aa1e5f97a1c004079d7eb25a9f72226d73742ae39ed39c94eea7e4104d9702115e629b68343dfd8088d9f701ed45f281ae18d91d355fa5e0486dd7139cb25a8bfeae60c1615c832292410c4795f05b1afef5273e0502965d0d6a0bf6f4e57ccc370de241fd48e951763749db6bacf2791aa7d6d8c517815b2f46190568fbb9f8345198de40b6881df4c31e77c242e991030a62dea1afb12557fa2fd2ca02e24253798c7c577fdcdd9b0b0421045091135d930dc0aee78204113fb6a7769e884aa9e2efed201adb49776b98886ff073e27acc2083e811530a2554b48c629304dd25c7fa322c36835846db5724f0a71a29ded9c847ba96a0fa1566fe3b14480b4314d431590a64ef0f4e84194840b6c51312c24138faad6c60c557ad22d3b08effbdd854efae4fdecf0ff5825959ecabdd66f195e86bbdef00cc40e623e1aee3b30c2386a8fe248d9f7f8ab600fa6280b24c4639d0bb98e1eb382d191d3e624f05582daefdbe73cdc4fa6ce32319e71239e9d875f96fa3192522e67eab6756514e4aa9c533d86b69144344488da0ef8ed5c26d4d36b5d1f69c64eb3f468ff719c40cbd4e21ae26f601f0726ac02036c13830153b20fc79b844340cb9e6938fd0d384836c6d01ed5ca16e1be88dffa3c79ba300e5d6fba3b20662c58d0334ff5745d239931cb7c5e9db39d0c5f88503f126371c6d720983f77eb6b5ea710e9481e6b4071229818546dd6b305bc0b651e27d92969da5b687f83ae1a1d2209eacbe1739ca26387ca1063d9a8ffb8eb516a6e719826fbe3d9d75764f3da604d947689f20059c7306dfc9ab5f6604c843c0c40d4730491862c80e6c3bd272d4001be53ad0abddeba0cfa07f69fa77a89f60dfc27983013dd14b08bc6cde7d30ba1bf860ac7540ba376d23a1ff29e85be159d7ff5713c70a837e5bb1822a57d5400b7b7d74332eae93390488ed6122d536db0218b933fb43343474036c0c796fb59cf3083612572879d5cb3e8b8de8259395f8eb8b6b6c318483488be787114179b9abfbfd3bdf268d83c1b6c9714d5f461e905a50451844bc68eb41d569a38ffb7756449fc388c4e1e6519289cae6fed1afb7ef89b1c7b1110399681d21d7c25f4e9c8c508273cdb091c17fa68a3a3221029f38d36a5e0e49dfbb2b924f0c6e11c9e3dcaf13c48be4b0e5cc51965296abe3713768f84d4719a7d9df125d9129105f13d8d18889437d51d75cf0452ab38ad52f07fd11e4c8990d2075c7071d4b691e508daace62af8da01a18a1ef27d71d55f96f62326dac68166dffe2d54dda0ad51ce422ddccb53f111ddb3c383b5247d0cdc7b3be13ea4775243cb5f68e614785d06a366831a9b701f97e605f3f9346c7d6dcd0ac1bc6db830aee150a294f7be4d43395509f44acfda79bc02004c230f88f7e693a72950874102691f8b7cd466fe29d079e76b66bb27aebb44029c3b6ccaf8659daf4853eaa3a959f43b17a7eb2833c72f62ec9ae6da50773f5afc77626ea3f9d46596f7172982435338d6f2178487172767705d433aaf4fc5847916212e02ae91c85ce1fdc2fac724c17512b3dda253e8b21dedc5085451f6e1e577b02cca67f7f3e4fdb659cc8fec275b96048ec68d2234a61799f4abb05c295c2621ff57a000a7c903cf326594647f3f11e75f51964feb5648c31c1cd55e7ad91aacee264247bf63f8d4d7d49adaf0c4b6e2d0b9e739199b4a9f7f48e373daf1dc2174859ed479602f4cfbe664ced8fe9af3f28734221564323ff34fa080d560aa953e43b476c5b12b308af29c627f554ddac65f3a197e905ce0d0d0d97b4cdfea84888abd102d1bafaefb5d6e83dafdf60a9c4e5a8a1036e5af9d8b6138769450077ae1ea7df27a35ce6f99c8e954729712222d77b6c7cd6e3332961a58282d38dc1c298b68abb336ecf75805e9fe84318c8578fee71d177a4617ea977693af900e31d63d7064c32d265c89266e7307d96178f2d28e34ceee19ce5335328f496bbff71cfc32031943124badd0a1220a78c45eca48dc486515122cf77ff98de9fe48fbd5e01b235cf1c5610d42af700bde0cea7b3fcbdcf6381649a6d9ec86297109d3508b0586a22b1da6dcb954489083c22a4e3185ff723b30ed8505564c49d4f98ae9aa5afddce5991ff17df55e750efc648170914218a33c0d3eb61f18a3d259b7429a1b572208af249c3041626057488b2bf0402ac88bcf45e263617c0e6973776a581b477def155d7edb04cc6d539d4ab336f3713d490f472c9bc83677811f0908c11edf1755b0369cb5a6d5fc943606eda272d4126f5e9ab39c088639f0fc85eb15ad2f70011ef071dfd28d3b9ab842f905a05cfeaa0876d4c9816beb69470572c637252ce6189c11a76d088260ef460f4464a3615c7ec29b73551b392ba7c70c5b10392963d70df41b416fa09cdbeb4fbe92381022f919b2042394e8bb0bd6517332afd9ad91e2d89300481c2d00cf6073bfab9d3c20c95738e2b06eb18219cb4ed84f03426d9681ea84965d31334b203895b1459f01b6f44ff8ce7822fc22a6c82ff43aec7b11a819a6e4ce86a3129e7cb4b7a1c288f8070f0a333e82cccd2aff6aa05a1586b6a9b13b6016025cfbac8d6e8079bde265feffb164770391e0ff29fca59d6dd402e38e1b1e8351487f44223faf3cf8258010180285bf811cc0c3fdcf8d84c06abc093676067d448d4ae07625e4151f9fa952a95566de4214992c76f81a92cd19a23ebd1df302fe8c757d288d05936019aeb66acf9b405e7d19d278ef18d94d54d6c78571d94cc6b11fc5f47828b4707ac2a46aaff100afceb129bf225666377e834020782b6d4a34fea9e0a7019ef27be5170a224ab3dc251ccc9376d9efb088cd99f85bed2932104d61a8973e64156e65167b786e94a62d092b3c5cf1a20a000ff8a3c004ac840d776171a5262c503622ea949fd056d75af39ea40256e2bf6864b25b579bb600ac1bfeaffedcdb8a020cbb00fd8535108c45a5078a4b6613dcd3e3f35d277373671351906b1548da7a13b803a7bff0dc098b195f7962b8ec1cc1b0517a63dd070d47b00328981953064d1f6bb28470f1bcf8a3fbbda3d32b7d1d855676c3b97b8dc8d01fe83564a214463d07f49474220795369b08a55a4496b5645c3fcc2f77646bbc454c028737e80772d00baaca494b9c357323e929d261eca176f7eb8bb8f1c7b7c91c20006ead524cc18b6395b550a6c4e005d4e7b68f8d8c8513a5aaa32234603136d8366d722340ef139519d0fa1ca872e1c1a23c22628157eb190b70917cc7be746d149b24b2131c38a9bfb85b5feb94217ed4be330eb5ebdcbcfd56a7bb675d50a0930288bf9d950cc54d391a7769d7fe021e492184f740965bb7695bad7e3bb8cfea68c9d023dbc1d64a6f950ddc8184a602c3ec222d5fe8754593efa707cd161b2440e524d0bb85b9e5a9d537471ba483aea009afff5bccc986ccec6885127c3760b6907b1d37bbedc64b5c8cf2ccc486a239a4f8d5592577e6bda24bb7754b459d80c4a7cd67e1ff4e4c3727698cd2d0c3f2f4f23de8d689ee58942b135a583909c87cb395f7ddd62ea0521d3eafe3afed1a10ec1069b48e61212acdcf52e69934006545f75c21540328bcf5ac504910268a433aa8b1c9605bcaf0bf11219a95321dffc7cd3049ebc8d921ba3bea14daa4921e64d38b47a6f4f4b6043f9395bf7150a34a19d73590982372734ede373f501bd022b8f88236f85d867b1f011663178cae37006fae2a02e47287e9da2c5adaeb77c274e4df6e5a57e6f77e81a8b1f738e5d7b7cc2f3e4da0878d4c0a24f9da8da5978028573bba92c4d3e746f7800eb0acc5b0fce101da1312926f0f5de24a3c89746f7a5e2e602d5fae1c5ee10d611d4d5dfc7c181654ef48bcab31d80331ba4175f947cabe065b93e82b9125ec24c940135ef06d467aaa503827d1fe2b6486e6020a0bba9751bb68223d27e4485102604ef404fe29b169b66169d8f740ddcbb6c9a1372850cb6893793af952d1480e91b60ab45c93a9a7672533340ac4689309a13dc51cd4a4b9a1d883580b154952e56b265fefdc5b449b7be544677d7600dd30d02c7ce033bb58d3a585b66eadc33e1011cb8e9b07f27a2fed01c2b9a03aef2f8feb88b99b94603a455e4741f6fe9e8adeac8e9f27b6b6d28c9f007c6f2a469ac2", &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000280)="5befeb9caab7fc634d422c8deda474d4092eabe64815c92f35a3054658986a35c191cd28df484a140dad4f3150a89df63a3b30a105e3d14d407abce4f15eaa4497508ac24dfc4417de12317e00b068dc93db03cf15d38c2e793f6e2abaf4136713d64aa4085ee2f5020339c6f880e2ae475bee01ae8781f6fb35a81a7ce5e653b56ed7b41e94c1a27283318336769d0290fc050dca16c33c01cf9ee13e4bec3ed37b808b6e148ce4479f981a9b4a75f6d6e0886707f92f5a3ef5d5daee51fe86126bcdcbdd9b7edb46d58cf1808009f0b00523ee95dcf8f0fee7c2da2ce966f7b28b508896f4d69f01bc60d8d75093bc4e9c255a") ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="4dc3", 0x2}], 0x1}, 0x0) ptrace$cont(0x9, r0, 0x7fffffff, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) clone(0x100000, &(0x7f0000001500)="02fb50292fc24960a277673513b4715a7cddbdaa6bfa83b933c2d681912f9fab0084eeb9bdd852fc1bb624f747ec223ffe32d2e45aaebc2889e9ae5f3a88b9bb422cb07a21fa4f238339f3293b502b950726f983e6a786539b6c69727e98f559ae425d64b9d00f0fa5cf53f7b1c030d1d52f1061a0afb8504f02186bcbfb423dd231ebbb8e2af9efdf034f5fc00b28b9f63d76fa4c7eb7d29b73e651aa52b1ec05dd1814076db059fb8fa933fad3049fbbb5e87b43c40cbb6634a5e70cb4424be89c69ebfe76c0deeb8aa6099c1e6ed691ce1ce6c05b4cfe88e0403f817cad7b0a3495d2f430", &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000001600)="89d10502aec72f58a03acc9fd572aa43458befd958dda8da0d2e839189be11de96d1c94bcad87d2a3e2af27be99b91a7f7219b6d0ceedd180209b33b79b8d14db52e20cfc661b7567a58bd55c2276251e78bd019b6345921bd810566b98bd62cdaec282d2e8f4b5b5b606a101952b9ddf97093e896cbc8b7c6acc5efd168a9") [ 1000.086194][T23762] binder: 23755:23762 unknown command 0 [ 1000.138206][T23762] binder: 23755:23762 ioctl c0306201 20000200 returned -22 08:41:47 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_