0)='./file0\x00', 0x0, 0x1f040000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:29 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x60}]}, 0x28}}, 0x0) 00:20:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3f00}]}, 0x28}}, 0x0) 00:20:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = dup(0xffffffffffffffff) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:20:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = dup(0xffffffffffffffff) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:20:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:20:29 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x60}]}, 0x28}}, 0x0) 00:20:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20040000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = dup(0xffffffffffffffff) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:20:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4000}]}, 0x28}}, 0x0) 00:20:30 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x60}]}, 0x28}}, 0x0) 00:20:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20100000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = dup(0xffffffffffffffff) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:20:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x25000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 00:20:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4788}]}, 0x28}}, 0x0) 00:20:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x36020000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = dup(0xffffffffffffffff) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:20:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 00:20:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x37020000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:20:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:20:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4888}]}, 0x28}}, 0x0) [ 941.844927][T23065] __nla_validate_parse: 9 callbacks suppressed [ 941.844936][T23065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 00:20:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3d010000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 00:20:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3f000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x40000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 942.340850][T23072] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:20:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:20:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x48000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:20:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 00:20:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x5865}]}, 0x28}}, 0x0) 00:20:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4c000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:20:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5c000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 942.735032][T23127] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x60000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:20:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x68000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 942.884706][T23133] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x10}]}, 0x28}}, 0x0) [ 943.784460][T23170] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:20:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6c000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:20:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x6000}]}, 0x28}}, 0x0) 00:20:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:20:34 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:20:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x0, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x60}]}, 0x28}}, 0x0) [ 945.302346][T23191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x74000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x0, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x60}]}, 0x28}}, 0x0) 00:20:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7a000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x0, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x60}]}, 0x28}}, 0x0) 00:20:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x20, 0x12, 0x1}, 0x20}}, 0x0) [ 945.636994][T23195] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xc0ed0000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x6558}]}, 0x28}}, 0x0) [ 945.832828][T23242] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 945.895770][T23250] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:20:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x20, 0x12, 0x1}, 0x20}}, 0x0) 00:20:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xc2020000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x8100}]}, 0x28}}, 0x0) 00:20:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x20, 0x12, 0x1}, 0x20}}, 0x0) 00:20:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xc8010000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 946.943119][T23276] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xc9010000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 00:20:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xcd260000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 947.083162][T23283] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xd2260000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 00:20:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:20:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:20:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf6ffffff, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x8847}]}, 0x28}}, 0x0) 00:20:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 00:20:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf9030000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) [ 949.985668][T23335] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf9fdffff, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 950.199763][T23339] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfbffffff, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x8848}]}, 0x28}}, 0x0) 00:20:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfdfdffff, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 950.429586][T23372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 950.592350][T23376] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xff000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x34000}]}, 0x28}}, 0x0) 00:20:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) [ 952.641977][T23406] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xff0f0000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffdffff, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffdf9, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffdfd, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 952.817427][T23417] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffdff, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x400300}]}, 0x28}}, 0x0) [ 952.992188][T23444] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 953.088355][T23450] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff7f, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1000000}]}, 0x28}}, 0x0) 00:20:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) [ 955.606349][T23478] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff8c, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffff6, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) [ 955.783713][T23484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffb, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2000000}]}, 0x28}}, 0x0) [ 955.933338][T23514] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xedc000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 956.035574][T23521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:45 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3000000}]}, 0x28}}, 0x0) 00:20:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) [ 956.817658][T23548] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 956.984432][T23552] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7ffffffffffff, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4000000}]}, 0x28}}, 0x0) 00:20:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xe000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x100000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x200000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x5000000}]}, 0x28}}, 0x0) 00:20:46 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x204000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x300000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r6}) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r7, 0x540b, 0x0) 00:20:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x400000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x6000000}]}, 0x28}}, 0x0) 00:20:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:48 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x500000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 959.898039][T23652] __nla_validate_parse: 4 callbacks suppressed [ 959.898047][T23652] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x600000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r6}) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r7, 0x540b, 0x0) 00:20:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x8000000}]}, 0x28}}, 0x0) [ 960.032482][T23668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x604000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 960.132142][T23681] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x700000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 960.265289][T23688] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0xe2c}]}, 0x28}}, 0x0) 00:20:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x800000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x9000000}]}, 0x28}}, 0x0) 00:20:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r6}) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r7, 0x540b, 0x0) 00:20:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r6}) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r7, 0x540b, 0x0) [ 962.489297][T23723] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 962.528746][T23722] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 962.589406][T23723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 962.645221][T23722] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:51 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x900000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r6}) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r7, 0x540b, 0x0) 00:20:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xa000000}]}, 0x28}}, 0x0) 00:20:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xa00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 962.935499][T23762] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xb00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xc00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xd00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 963.042899][T23768] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xe00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xc000000}]}, 0x28}}, 0x0) 00:20:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r6}) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r7, 0x540b, 0x0) 00:20:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:54 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xf000000}]}, 0x28}}, 0x0) 00:20:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0xe18}]}, 0x28}}, 0x0) 00:20:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r6}) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r7, 0x540b, 0x0) 00:20:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1100000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 965.947017][T23831] __nla_validate_parse: 2 callbacks suppressed [ 965.947026][T23831] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1200000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1504000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 966.063902][T23835] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 966.103462][T23836] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1604000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 966.135304][T23835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x10000000}]}, 0x28}}, 0x0) [ 966.249690][T23873] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 966.353937][T23878] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r5}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r6}) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r7, 0x540b, 0x0) 00:20:58 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1704000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3f000000}]}, 0x28}}, 0x0) 00:20:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r5}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:20:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1804000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 969.018597][T23905] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1904000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a04000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1b04000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 969.175403][T23912] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1c04000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:20:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x40000000}]}, 0x28}}, 0x0) [ 969.305560][T23941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 969.401633][T23954] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:20:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0xc90}]}, 0x28}}, 0x0) 00:21:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r5}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x60000000}]}, 0x28}}, 0x0) 00:21:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1d04000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:01 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r1 = socket(0xa, 0x2, 0x5) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r2, 0x490c}, 0x8) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = gettid() r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x38, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0x731, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x12) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ptrace$getsig(0x4202, r4, 0x800, &(0x7f00000000c0)) ioctl$TIOCSIG(r3, 0x540b, 0x0) 00:21:01 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r5}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1e04000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 972.051475][T23983] __nla_validate_parse: 2 callbacks suppressed [ 972.051483][T23983] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1f04000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 972.136678][T23980] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 00:21:01 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r1 = socket(0xa, 0x2, 0x5) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r2, 0x490c}, 0x8) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = gettid() r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x38, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0x731, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x12) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ptrace$getsig(0x4202, r4, 0x800, &(0x7f00000000c0)) ioctl$TIOCSIG(r3, 0x540b, 0x0) [ 972.204383][T23987] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x65580000}]}, 0x28}}, 0x0) [ 972.286092][T24003] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 00:21:01 executing program 0: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="3222aee4cdfbdb06116b4fb314673ae8c14f0988f2d25857db10aeba0cd87a390c0c2bff1b4998d5cdaf9f5ca1bbae8c5992567ea81de2c616253d9c083212f46ac00b85cc57bca18dc85120f6359d72911895acf35ee14e3ef483c3", 0x5c, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea2bdc9c1587a050000000000000042e33089754c8107c3cd4623dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb7bb50ec93c152fa483198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b0674cc5c1e298a16324fe27da2a908ba9ff3c009d36d691cc7911219a2fd5d", 0xc0, 0xfffffffffffffffe) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f00000018c0)=0x7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x1) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r1, r1}, &(0x7f00000013c0)=""/265, 0x109, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$instantiate_iov(0x14, r0, &(0x7f0000001780)=[{&(0x7f0000000380)="e5e00466148f67167ec577f44501965dc1ba30301a199e2447a5fcaedc736140dd453aacfa411627d9b5bde337cbe3ba824e5c583487b8ea563959f6f4ef56096ce2af9848fdf1aedf47015ee7a24d284bd8d26487c33957207d38af9243ed39cb9dab70e2dbdce7f218ab15a570323ad1f8fdba0477ce8b03da723e0eeca58cd379812651d76ffb7e6a6b840a59e0acb6f50888afbac9b693eaf65c3ee7846af65b9a96d1d8379b977295f374be12a1a1b9fe007c514b5b5202a3088df97a1e9f0e1708817a06", 0xc7}, {&(0x7f0000000480)="7629d7090c07912ee0048586b386ec8f226d9e8a9792ba1ad5513f2068c5d9c26284f793f410b7c4e690316824aa268bda08b7d3eb58c4cb5a974fede7a9881f65a72444474c33bef2f31d99f481a146ba3918caa06f2e3c3966545aea7a5fb0580bde7507f979d3616bfc4f19aea6e42ef15a22a95b1aba48327006dfbfac1bea98485217c9e7a6eab3f91dbeb72dc1abcc0b767adc9d7776674c34e768e9d259249a508ba5c171f5150c1fc679f4f38d445a7a624f96d8ab4df1fad4461d3f89606061f76a8cdf9025540a1e02a2de5fc8c603a8dd45a193fb3d7b6438539b8773c75ad948831c96608aab2f34", 0xee}, {&(0x7f0000000580)="740013949943812c8f8abc64abc805266452705567efc9c47ac0367fc9b38791c850c2daea43daddebab8ef198c53f6f4ecbd2dc24634726214c16f9c5f7fb714652f26efa22221399a499a30d6b769563fa8a2b4334d57914a3286721b5954b65c36edc1d19e35d4f95d94780db349d38e236ad6685547ad66f866cdfe420bbded83532a8864225816231ec8c40bf79dbe5b804f8990e3e0c976a36f6eea713daad5019fcaaeb0dff4361333d7ca5b6f0cda2d43b97cea79180ea582f0de6803598fb9068ebfc1eef5623469f2eb2d7c4103e34e49df231dfd4a9e5", 0xdc}, {&(0x7f0000000280)="357d4fb76b634c3b77d92346b9fd49a33c476a142cf3b517051abe76d285b68b4b1ab7b593a4e52f8c793c6693224d03d781e4334e6592403b3006594768863a433551f7fd29e170f015513032fe331f0b9b22316f90e04b628ca674448482bb9bad36503cd380feddf7fa84b290378defe504649410", 0x76}, {&(0x7f0000000300)="90ebf0f4f60f0f7e235c75a8cb514cdefb8faa700d102cbf226ecf756e4bfae8e2d5", 0x22}, {&(0x7f0000000680)="10fda13cc37ac867815aa5baf6d74c46a247a4b271cc46e96c6dd256ea86db13181bc831aed011c9c3f4a58df97e13bf16534f", 0x33}, {&(0x7f00000006c0)="9d4dba9cde2a9837e2d58436dfcebb6e110278d035fceb6b65b8df66f15fab9ff50a3c4c681a3e70d1ed845ca331e7b9994e9fe625a2e5b46992476a0f7ed06781530a37ef71f6e2fde7bff56f48bee5f1c96a2c7e514fa6dfbc580fb0e56a425a5515da44989803df8715da4732fc4782e43e3d8e2c2bdba064a7109ba49748618a09719644206f33d4dc93e8d29fca0eb5327346a0070bad97200a2f63070f99c0f0175e68a329b80a531401f0f999fdd791dfb0ad4c509bbdfb3574d094b2dd979415c69e310f732495a1f40fe548b9b84829e69371c6e124727f4b6d0ea09f2bafa87cf2d1f09c4342138ef6a5e0c6690c800677ef8d934789ad7ec3bcda13469e3d0849b560a0c85461b912a5fb12b73018ec7404dfb8bd09216fc10469d49656f3a6a482574a49d89b44c995de487b4d61cdca4c2bfd12acfe3888eaebb2325dddf2bd0c1caa57395a45bccfe9632b3e173632d22a1f7a8c75e63dea9220889712bdff3ca8d5eca2d84549e1fbaa455134ca9bbbdfa20d39ec9f5770302b1fd7701c62d6110720dbdd8dea5b03abaec5804aba8ad96d7d7819db52e7cbbdc3cc378e0517da9163236c24e6189bb37fef7c919acf364b050d2a95e62347ff8f18cd10b70694b822f73f6bc5c792dbbe08842b17cf640ea743a13d174055d99904aab68d08b54b64e00e2d81be4b73202a8d9f76768380d4d131f9935b39f0798a2f11f268e483a35708d1db3865a565927d3898f3266eb0f4148427e21b695eb119fbc2bd6313c8bbab5d323cccd156f1fcad9d7ccf9dec917d4db696dbc8b4e820b8b850283f152d7530e759fbb47626026aec3b1fdbc0ab899164b16d361ec81d42ce6ab5ffa3b16b43a1abfb959958cc0ea86aa161b5529438f1e9d606e792b94e090c8dcd276add1d8611097fca05fd1202163fa34e8beb5c5e51dc56b6e5b5f2419c88c02c72e8629938d89428ef4b89deabf696e972d3528f2873f0c95a34152a9daebe61e0555d912da52c3ecca6fa3c92a6f8603292e4020d291ce4309fc94b860239ea3a2b73dde14e0a0b0d4a4bbe98b54c6c6e10713490570b633788f543a02f8ed3e9d221f22c581182593adc5e4203a17fd9cbd8658d16fd3a7b591b6aa8674b0352e9236a6f9cd4b18798ad6c899f88864806186cd3dbf880fe6eef7e8d1812df001f74f2965c45d435ef97a745e470c8c3ac38ecc16d4253b42f4b204cdce83022649b375fc4246736b59146ae227309c5202d470b8092ec8cff709100b4eb3a50975ecdcf3151534860839a35099f7a25a3660872c43cdda8f8ba1f1fc197dca8d0a82c48b50894cd1ce8c46cbc034da158254c2c58602c3aad4ac68680e238c2b81d338bd3b942fd24d0d00940bcf84d7fadcec259c504afe909d14d9ac7d43ec07d4005b9d7e1657b595424f47fb104157e5aa89f12d7439b4f62982a1970d993f78acf44d6fbe0c822c47aec349cfe7eb9443a2ce729506af1e3f2fb2699bf4490a0f769d505bfa670ebcfb60f8fa4900064c04935d85c3e25b521d40369947688d7b847fb220d9ee465020eede411f9b2cf2c87d6cf0347e2ff8cc987c7d09487705267d2d5d1edc73f47bb8cdd44a78b7e52c922d68031774faac2eb2eb423536a14dcd684e9399dec609ea17db79e4df4a897e63a730018d4c3741ecdef558abf04273b63df13e4f63ffa8242663a3459997fd3d1b20feb527a6c5fb4b9e5fad048c2f2b9f84955b468e83535ccfaa9060991bb4bfb4c2ddc5ed76727d56b06bfd74224cb02c2ec2010f1e852bf9b1ecf1c5c6fbd9757bdf6dce520f29a66afb7333dc70222cd7afa582f138b442b221ffdc00d3030f5f3c073384d15f15c10e6ea676bb4d04ba6848aeb5b582ca3479eca134e05a589f1f7ed08a049bb186de2b2ca554322a7fcbe6b6e41727906aa192fc4ab33ab03e2859590e2d6b632ecdf283d0a2f0ae0a524032d496092a9fa15874fa24d2eec586fa792bedfc66811fb1a267baa6e2d9e00ee32483435cd8f27450d5cd5f2d8b82b05737ea29c2c90e450ee6c1b2a0ba85eb9333de17927424b2c467bef922b3431d2272ba5a70171931ebde60a8643569975ed7525d5e62c0550dbae7eb969da5669542286cc2bc778375be503ab7fe762e5fd518dcb3c737983131fccc3bce10be1a8ce912267c7668425f03cd97f1c29b2df33c24abfb3db10946902af6d94017b3b68d543615faef3b6020b5500c6fc0030309b949e2ad340af6b1a9ed91cf41f51bf9a18a9e34d57a1f5b380ffdd16eb6dbaa55f3a731581c5a198df720a95e885de1b0570907a5d06c08bfccec75c71c92ce1556f77260c0f675b99fcc3972029c709a5234af17e5c5461f39ed82725b722636fc7ccd14550fed8e894e3bfd5f19bddaabda4476e41306a73d73eba39f3578f9b4ffcbc6b26bd6f620c0b342741fa0d76019894b3ff1b4cdc5a6b7bec5f05704c337fc35d4093673cfd93005b601c2948295141e1275f98b857563bf40bd1da24191f70101e965804c454aad704ca40e355fc77a1be77ffdfa8b2200664eb34cb57c160e558f7a34cc4d196951294eca74590fb9d024d614b0521fce9b17035d0ec67693fae02fe5783dd24d3685806069b5d0116647b6ddc8af92de507a47e35377900a9c75f8d0b3df5bafb0c5f540b0ff1a65248c8c466596d62c4fc10234628908d3b6b37f081ef8e3b94bfdf1e3d6656618d77c437a640814e827b82f3adecc11405cc61faebe596c630c600dd7cdca97f9c9a932180e4524f2e166415e355d6d40b1974db6d555cd34b1cca0ec2882e24fa7656c75008310e6271a28db770161fe3554c493934ca130eab3eccd85e2e9aead8ea0295dafd8132a49551f7d750964e3efc527171825baf72ad6d07b5fd6f5e7c3ac164ad220dde14e5446825a128be1cad092b13da8548310992353cebdf1ecc637de7a25e46840a3769d3d34ae1d74c8107cb265b8b500c373d6098659fc524b2ae7e3fe6c22225f623427914e11535303e2abe96dbd6b399c7e6fc9efe269a04390c2767a89a2eceaa14bfea013abc4b7731fa5ae89e2cd25484a6d684443d768cf147ec8f6cc55a74bd67399611f9926311c335a0a042159b9d903919b6fb80e2f9c8fb8233eb6c6017eff22b453e3372948a793bd40d31698574d034dacba471a935b1cd9d78fd1f7e39ae3a3461d1f0c4139f5138297a47b10162947c38b740e8115cf0ca300fae93a53073eae8b1d296789ad373ce813f0f9c1fbed87ea87029af2cbc4f060149bc037269961cec9dce6fe24a4ed9225c4500ba5428d9698a64968fc6e54da255c5b500481fb2339f7b7aa3baa7a1347f9324152c0836e43a5e21614f9621e65b577f0975bd5c7db772d2e9bdc6ed65d9783ef1b59f8d3510e7ddde9c3fc1e7641ea85d83561d3d50fedebefcba2e1b75efa4ba8803881e967d53f6439a0f61a241ec101533463cce0fce6cc0f7c4cb600f1b694ffa8c676fee0af11ba844c14bd21691e2e015888b20ee83f78e9240786f089645730d0299cc01ed3e37e530789116010b9f11bc26603770468c7c973a85d49b3cb2f9987831456122cdbb1d273472156861dd32a2257ed88cb7cb0d8b8b3d25cc0d7d0a31b7e9c8c8e9d7e36595e6702bd84d5916c6858377d81915c4d1eb276ce0ece43ca5007d44bbf066d9cc5c209eaa7523a2be2eaa9e7224197bb3f44fea210ab4c87979fbd55e3cf32b57e4bb636a058955abe07c11c2448fee1055ee67f2f81de16494e0c7d1ac31cdff1a67afd24d966024c16226ce48531da109877b50b99b24f35c254307f198ee49398591d58590e9bdd8de4750d14cc23aa68cd53ae5f4ba0df5908ee5eee70eda24fc7f852bcb912d84e6c7cf410ca7477115b87de44f95b387961d255d3c54375a09d101be85339426ea8b6b0a39b41f689a4649169eae6e4cc7dc0be6f054a2bf6aac36455ca93b66e50164e356bab86d8bcc63e2c02c6b21010b78232c257a7d686a0a41f09ebc30249dd51b4169d9651b4af77dbe034b775321efd53893fd80265ccdb1dca84f4452b66e363817da2ff19cd761b50cb41b1f74cf82d2ad20e4673ad3d2dd4a41134c6fa4df7c02c777a393e21375b205d79ccb17c48d4cf182bf8584de95ec5046de2fa0f30877ceba6e8f893bd8fbf7b3884874709e18d3a152a72d8459169e9616cde43c712c125e658ec8b9bfee0a1f287569372da341431c4a32b79d678cf7b3577b4bc7604ccbda9c0cbb3cb26f0c212588b7a62a4fa4f56cd5ba344d737284514c41d22cf9f1e30d591f5502868a6a849acdac7aa12f7ecd8d85e5ae7cda0dbfa1d747006f0c0f65389db44ab42d828e46252e29d14a506ce2ec6ee01aee188f9eb89b9c2d11c3dc780ddabd9fa96f5c820594d37fdb71bb5cb4a31f3bbcbee09e8610be6798bcd95566290deeb1671f728b5d6c8af097537a0a04db8a8ca7d640dd0d5eea46b075b7dd0494340adc3646874511e938a37be03c293b38894f74e52c885f3819ef9f71691a3aecce8b9a1f07ccd5d3ee581804adde972aa152fb6c8deb520d238c73b1e24dd28f9a6c7409d768c810cdc1d093510f6bcf8730ebb9f8253ef830ab0e42509902fb6dbf8403ac18c67bb47baceaa31c6073d233ef6edcd44734d720452671df28a999b58c42e52f1b657f83b892ea0912db65d2ba56e68fe7212d05b8b3823ff3a40d68f2ad89e521246c8b9591032fe2cf9af451cf52cd769be602cd5031812168b10c3eecdb0dd3f636e2c59bfd416ee38934da66bcbab33b1921bad1fa62116c0299cac78fdbb27dd245f31eb1106574d3b3cb03c94516da16bdfa353a366ffc8c981ffa6c0288db53b1bbb6a87bc0c558a8b15188f01f7704839bf89f3f75b38baa3f4a1dc085df5e75bd504e116a7f3e85f9d0581fa704c58b307abab992b24916217d3e3a0c36745d5f468e2d8fe6db0a105486da3040b361a4e3090414426b5347af474516c0b7b530ecd73ce949da9c60780c24e781e94405e8c29e1314fc1aa7600cf5a8e8867e4ec97f877ebec06699c8b411427acb0d4c7251d8133104da3bf1838ad02b3d78377050e9cceb5765e33d74ea32edfe089850cdb69feff0c07d08757d1c1b9052d888857ef593ed02587fbf0706c4da433ce5f0ffc8f94e0ecea713375ce3b9e7ae40b7a8dfeb79c13ba20e8f4bbe8d387d90d3fcc592f661faf132f217602b829fe6a31b505e151c36d896092f999f2f29c891651b6934b52ab7e55b70fae8bfdf4f9cbe7b32726c48c65adc271e9c37cb23795b001be65ef7842ec4aa989c18053a7e96441f592057fe8a9c2553e6ea153c4a236199c31150979a97c368e32e41e00d443c9d92e0387437a77d30b0572799071129b8d474bc6745e2f8d6d90249b2c659c9b566f786354c5e02cb75f93030175216182b357071317d22103c9ba19d81bca79a62ef943417c18301d74cba870953e439aadb6990563b65e669abf33c6c2d2a7122e02e5addbdb1f43bd5794967ad278e4979453eafdb6c864893d526ee03db2dcc0964b536fa5989e9729b307faa4ded546b6ec48730b4b74a22c981c0b6cb608747314cbea88efd63f9d2d068c483026a530911e569ff667b64ca27090049a59e0e1be77299968a1ca391dab2ad2a7dcc3c33d7a10d5afa638f567d34decfd3cfb262c0ca449fc055964d4070ee93d0b7791bc40012787804a2a1bdb80be8ba417563d888b90fc7eb7e27e11f83f8c848d12b5634bd86dca66da775ab", 0x1000}, {&(0x7f00000016c0)="3dce451487ede7bd61097d036b590b13cc8874c57059947728d440bf5ea639f2223b89f64b61bdd571e07eaaa196ff13edaa9edc7a2e823bb6073992c4f39cbfd60a5475b53dbc4f2a6e93b5db8042268bc9403a4f85a637738a9ff8d0e56ce8f5e242f950f15537", 0x68}, {&(0x7f0000001740)="27fe0135df", 0x5}], 0x9, r1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x8000, 0x0) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file0', [{0x20, 'nl80211\x00'}, {0x20, 'nl80211\x00'}], 0xa, "77923bafee22530ac5ff0b17a42db94792a65ff55c42f94efc98ea9df2b4cba96e9d089d7d6b1cf1c319253bc5f3da57fdbb2b69de0d9fd687a1e073908a3f135f6db324c149e35cedd129b562b8b404c26be0a25226ebd1dd3b48ae0b"}, 0x7a) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r7, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) [ 972.348793][T24020] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 972.411543][T24024] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 972.465375][T24026] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r6}) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x0) 00:21:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2004000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:03 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:21:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x81000000}]}, 0x28}}, 0x0) [ 974.149685][T24049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 974.282539][T24056] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:04 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:21:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2010000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x88470000}]}, 0x28}}, 0x0) 00:21:04 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x81000000}]}, 0x28}}, 0x0) 00:21:04 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) [ 975.097712][T24079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2500000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:04 executing program 0: ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x1) [ 975.193026][T24088] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 975.241333][T24093] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:04 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x800, 0x1000, 0x578, 0x960, 0x9, 0x2, 0x2, 0x2, {0x3, 0x0, 0x1}, {0x80, 0x3, 0x1}, {0x85b, 0x4}, {0x7, 0xa6ff, 0x1}, 0x2, 0x1, 0x0, 0x800, 0x0, 0x9, 0x6, 0xfffffffb, 0x5, 0x5, 0x1f, 0x5, 0x4, 0x200, 0x3, 0x5}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSSOFTCAR(r3, 0x4b41, 0x0) ioctl$KDDISABIO(r3, 0x4b37) 00:21:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3602000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x88480000}]}, 0x28}}, 0x0) 00:21:04 executing program 0: ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x1) 00:21:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r6}) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x0) 00:21:04 executing program 0: ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x1) 00:21:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3702000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 975.814448][T24126] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r6}) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x0) 00:21:07 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x1) 00:21:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3d01000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x88a8ffff}]}, 0x28}}, 0x0) 00:21:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r6}) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) 00:21:07 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x1) 00:21:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3f00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 978.179517][T24165] __nla_validate_parse: 1 callbacks suppressed [ 978.179525][T24165] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:07 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x1) 00:21:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4000000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r6}) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x0) 00:21:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x0) [ 978.344070][T24171] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4800000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:10 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x0) 00:21:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x9effffff}]}, 0x28}}, 0x0) 00:21:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r6}) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) 00:21:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4c00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 981.249405][T24217] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:10 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x0) 00:21:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5c00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r6}) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) 00:21:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r6}) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) [ 981.373714][T24225] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xb1c5a3bb}]}, 0x28}}, 0x0) [ 981.546702][T24255] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 981.676047][T24260] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6800000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xbba3c5b1}]}, 0x28}}, 0x0) 00:21:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0xefffffff}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 00:21:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540b, 0xff00000000000000) 00:21:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x3000000}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 984.269817][T24287] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4ca20100, &(0x7f0000000080)=[{&(0x7f0000000840)="2300000025000511d25a80648c63940d0424fc60040018000a001100022f004837153e", 0x23}], 0x1}, 0x0) getpeername$netrom(r1, &(0x7f0000000040)={{0x3, @default}, [@null, @rose, @null, @bcast, @null, @rose, @remote, @netrom]}, &(0x7f00000000c0)=0x48) ioctl$TIOCSIG(r0, 0x40045436, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$sock_bt_hci(r5, 0x400448dd, &(0x7f00000001c0)="868b3ad60790ee7bf5d76a545ccbfc0056c5906d2e4b948e3714bf") splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0x101, 0x1, {0xffffffffffffffff, 0x0, 0x6, 0x2, 0xdc4d}, 0x5}) 00:21:13 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540b, 0x900000000000000) 00:21:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6c00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 984.316503][T24295] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:21:13 executing program 4: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="3222aee4cdfbdb06116b4fb314673ae8c14f0988f2d25857db10aeba0cd87a390c0c2bff1b4998d5cdaf9f5ca1bbae8c5992567ea81de2c616253d9c083212f46ac00b85cc57bca18dc85120f6359d72911895acf35ee14e3ef483c3", 0x5c, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea2bdc9c1587a050000000000000042e33089754c8107c3cd4623dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb7bb50ec93c152fa483198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b0674cc5c1e298a16324fe27da2a908ba9ff3c009d36d691cc7911219a2fd5d", 0xc0, 0xfffffffffffffffe) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f00000018c0)=0x7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x1) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r1, r1}, &(0x7f00000013c0)=""/265, 0x109, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$instantiate_iov(0x14, r0, &(0x7f0000001780)=[{&(0x7f0000000380)="e5e00466148f67167ec577f44501965dc1ba30301a199e2447a5fcaedc736140dd453aacfa411627d9b5bde337cbe3ba824e5c583487b8ea563959f6f4ef56096ce2af9848fdf1aedf47015ee7a24d284bd8d26487c33957207d38af9243ed39cb9dab70e2dbdce7f218ab15a570323ad1f8fdba0477ce8b03da723e0eeca58cd379812651d76ffb7e6a6b840a59e0acb6f50888afbac9b693eaf65c3ee7846af65b9a96d1d8379b977295f374be12a1a1b9fe007c514b5b5202a3088df97a1e9f0e1708817a06", 0xc7}, {&(0x7f0000000580)="740013949943812c8f8abc64abc805266452705567efc9c47ac0367fc9b38791c850c2daea43daddebab8ef198c53f6f4ecbd2dc24634726214c16f9c5f7fb714652f26efa22221399a499a30d6b769563fa8a2b4334d57914a3286721b5954b65c36edc1d19e35d4f95d94780db349d38e236ad6685547ad66f866cdfe420bbded83532a8864225816231ec8c40bf79dbe5b804f8990e3e0c976a36f6eea713daad5019fcaaeb0dff4361333d7ca5b6f0cda2d43b97cea79180ea582f0de6803598fb9068ebfc1eef5623469f2eb2d7c4103e34e49df231dfd4a9e5", 0xdc}, {&(0x7f0000000280)="357d4fb76b634c3b77d92346b9fd49a33c476a142cf3b517051abe76d285b68b4b1ab7b593a4e52f8c793c6693224d03d781e4334e6592403b3006594768863a433551f7fd29e170f015513032fe331f0b9b22316f90e04b628ca674448482bb9bad36503cd380feddf7fa84b290378defe504649410", 0x76}, {&(0x7f0000000300)="90ebf0f4f60f0f7e235c75a8cb514cdefb8faa700d102cbf226ecf756e4bfae8e2d5", 0x22}, {&(0x7f0000000680)="10fda13cc37ac867815aa5baf6d74c46a247a4b271cc46e96c6dd256ea86db13181bc831aed011c9c3f4a58df97e13bf16534f", 0x33}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="3dce451487ede7bd61097d036b590b13cc8874c57059947728d440bf5ea639f2223b89f64b61bdd571e07eaaa196ff13edaa9edc7a2e823bb6073992c4f39cbfd60a5475b53dbc4f2a6e93b5db8042268bc9403a4f85a637738a9ff8d0e56ce8f5e242f950f15537", 0x68}, {&(0x7f0000001740)="27fe0135df", 0x5}], 0x8, r1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x8000, 0x0) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file0', [{0x20, 'nl80211\x00'}, {}, {0x20, 'nl80211\x00'}], 0xa, "77923bafee22530ac5ff0b17a42db94792a65ff55c42f94efc98ea9df2b4cba96e9d089d7d6b1cf1c319253bc5f3da57fdbb2b69de0d9fd687a1e073908a3f135f6db324c149e35cedd129b562b8b404c26be0a25226ebd1dd3b48ae0b"}, 0x7b) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r7, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) [ 984.379498][T24296] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7400000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 984.552603][T24310] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 984.570475][T24310] CPU: 0 PID: 24310 Comm: syz-executor.0 Not tainted 5.8.0-syzkaller #0 [ 984.578912][T24310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.589136][T24310] Call Trace: [ 984.592419][T24310] dump_stack+0x10f/0x19d [ 984.596738][T24310] sysfs_warn_dup+0x71/0x80 [ 984.601300][T24310] sysfs_do_create_link_sd+0xa4/0xf0 [ 984.606573][T24310] sysfs_create_link+0x4d/0x60 [ 984.611419][T24310] device_add+0x6cd/0x12e0 [ 984.615913][T24310] ? ieee80211_set_bitrate_flags+0x476/0x490 [ 984.622241][T24310] wiphy_register+0x10af/0x17f0 [ 984.627178][T24310] ieee80211_register_hw+0x197c/0x1f20 [ 984.633759][T24310] ? driver_bound+0x30e/0x340 [ 984.638420][T24310] mac80211_hwsim_new_radio+0x1478/0x1e90 [ 984.644132][T24310] hwsim_new_radio_nl+0x5e0/0x720 [ 984.649191][T24310] genl_rcv_msg+0x5fa/0x640 [ 984.653757][T24310] netlink_rcv_skb+0x13e/0x240 [ 984.658518][T24310] ? genl_rcv+0x40/0x40 [ 984.662705][T24310] genl_rcv+0x24/0x40 [ 984.666749][T24310] netlink_unicast+0x5e2/0x6b0 [ 984.672380][T24310] netlink_sendmsg+0x6d8/0x7a0 [ 984.677188][T24310] ? netlink_getsockopt+0x690/0x690 [ 984.682377][T24310] ____sys_sendmsg+0x360/0x4d0 [ 984.687224][T24310] ? import_iovec+0x171/0x1c0 [ 984.691964][T24310] __sys_sendmsg+0x1df/0x260 [ 984.696544][T24310] ? percpu_counter_add_batch+0x112/0x130 [ 984.702515][T24310] ? alloc_empty_file+0x107/0x1c0 [ 984.707540][T24310] ? errseq_sample+0x2b/0x40 [ 984.712117][T24310] ? alloc_file+0x253/0x280 [ 984.716612][T24310] ? ktime_get_ts64+0x2d9/0x310 [ 984.721516][T24310] ? set_normalized_timespec64+0x104/0x130 [ 984.727329][T24310] ? check_preemption_disabled+0x51/0x140 [ 984.733569][T24310] ? debug_smp_processor_id+0x18/0x20 [ 984.738934][T24310] __x64_sys_sendmsg+0x42/0x50 [ 984.744989][T24310] do_syscall_64+0x39/0x80 [ 984.749415][T24310] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 984.755300][T24310] RIP: 0033:0x45d239 [ 984.759444][T24310] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 984.780063][T24310] RSP: 002b:00007ff6f8d99c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 984.788908][T24310] RAX: ffffffffffffffda RBX: 000000000002bf00 RCX: 000000000045d239 [ 984.796864][T24310] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 984.806641][T24310] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 984.814637][T24310] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 984.822671][T24310] R13: 00007ffef403de1f R14: 00007ff6f8d9a9c0 R15: 000000000118cf4c [ 984.858977][T24309] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7fffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x3f00}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 00:21:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0xa00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xc3ffffff}]}, 0x28}}, 0x0) 00:21:16 executing program 4: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="3222aee4cdfbdb06116b4fb314673ae8c14f0988f2d25857db10aeba0cd87a390c0c2bff1b4998d5cdaf9f5ca1bbae8c5992567ea81de2c616253d9c083212f46ac00b85cc57bca18dc85120f6359d72911895acf35ee14e3ef483c3", 0x5c, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea2bdc9c1587a050000000000000042e33089754c8107c3cd4623dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb7bb50ec93c152fa483198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b0674cc5c1e298a16324fe27da2a908ba9ff3c009d36d691cc7911219a2fd5d", 0xc0, 0xfffffffffffffffe) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f00000018c0)=0x7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x1) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r1, r1}, &(0x7f00000013c0)=""/265, 0x109, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$instantiate_iov(0x14, r0, &(0x7f0000001780)=[{&(0x7f0000000380)="e5e00466148f67167ec577f44501965dc1ba30301a199e2447a5fcaedc736140dd453aacfa411627d9b5bde337cbe3ba824e5c583487b8ea563959f6f4ef56096ce2af9848fdf1aedf47015ee7a24d284bd8d26487c33957207d38af9243ed39cb9dab70e2dbdce7f218ab15a570323ad1f8fdba0477ce8b03da723e0eeca58cd379812651d76ffb7e6a6b840a59e0acb6f50888afbac9b693eaf65c3ee7846af65b9a96d1d8379b977295f374be12a1a1b9fe007c514b5b5202a3088df97a1e9f0e1708817a06", 0xc7}, {&(0x7f0000000580)="740013949943812c8f8abc64abc805266452705567efc9c47ac0367fc9b38791c850c2daea43daddebab8ef198c53f6f4ecbd2dc24634726214c16f9c5f7fb714652f26efa22221399a499a30d6b769563fa8a2b4334d57914a3286721b5954b65c36edc1d19e35d4f95d94780db349d38e236ad6685547ad66f866cdfe420bbded83532a8864225816231ec8c40bf79dbe5b804f8990e3e0c976a36f6eea713daad5019fcaaeb0dff4361333d7ca5b6f0cda2d43b97cea79180ea582f0de6803598fb9068ebfc1eef5623469f2eb2d7c4103e34e49df231dfd4a9e5", 0xdc}, {&(0x7f0000000280)="357d4fb76b634c3b77d92346b9fd49a33c476a142cf3b517051abe76d285b68b4b1ab7b593a4e52f8c793c6693224d03d781e4334e6592403b3006594768863a433551f7fd29e170f015513032fe331f0b9b22316f90e04b628ca674448482bb9bad36503cd380feddf7fa84b290378defe504649410", 0x76}, {&(0x7f0000000300)="90ebf0f4f60f0f7e235c75a8cb514cdefb8faa700d102cbf226ecf756e4bfae8e2d5", 0x22}, {&(0x7f0000000680)="10fda13cc37ac867815aa5baf6d74c46a247a4b271cc46e96c6dd256ea86db13181bc831aed011c9c3f4a58df97e13bf16534f", 0x33}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="3dce451487ede7bd61097d036b590b13cc8874c57059947728d440bf5ea639f2223b89f64b61bdd571e07eaaa196ff13edaa9edc7a2e823bb6073992c4f39cbfd60a5475b53dbc4f2a6e93b5db8042268bc9403a4f85a637738a9ff8d0e56ce8f5e242f950f15537", 0x68}, {&(0x7f0000001740)="27fe0135df", 0x5}], 0x8, r1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x8000, 0x0) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file0', [{0x20, 'nl80211\x00'}, {}, {0x20, 'nl80211\x00'}], 0xa, "77923bafee22530ac5ff0b17a42db94792a65ff55c42f94efc98ea9df2b4cba96e9d089d7d6b1cf1c319253bc5f3da57fdbb2b69de0d9fd687a1e073908a3f135f6db324c149e35cedd129b562b8b404c26be0a25226ebd1dd3b48ae0b"}, 0x7b) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r7, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) 00:21:16 executing program 0: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="3222aee4cdfbdb06116b4fb314673ae8c14f0988f2d25857db10aeba0cd87a390c0c2bff1b4998d5cdaf9f5ca1bbae8c5992567ea81de2c616253d9c083212f46ac00b85cc57bca18dc85120f6359d72911895acf35ee14e3ef483c3", 0x5c, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea2bdc9c1587a050000000000000042e33089754c8107c3cd4623dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb7bb50ec93c152fa483198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b0674cc5c1e298a16324fe27da2a908ba9ff3c009d36d691cc7911219a2fd5d", 0xc0, 0xfffffffffffffffe) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f00000018c0)=0x7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x1) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r1, r1}, &(0x7f00000013c0)=""/265, 0x109, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$instantiate_iov(0x14, r0, &(0x7f0000001780)=[{&(0x7f0000000380)="e5e00466148f67167ec577f44501965dc1ba30301a199e2447a5fcaedc736140dd453aacfa411627d9b5bde337cbe3ba824e5c583487b8ea563959f6f4ef56096ce2af9848fdf1aedf47015ee7a24d284bd8d26487c33957207d38af9243ed39cb9dab70e2dbdce7f218ab15a570323ad1f8fdba0477ce8b03da723e0eeca58cd379812651d76ffb7e6a6b840a59e0acb6f50888afbac9b693eaf65c3ee7846af65b9a96d1d8379b977295f374be12a1a1b9fe007c514b5b5202a3088df97a1e9f0e1708817a06", 0xc7}, {&(0x7f0000000480)="7629d7090c07912ee0048586b386ec8f226d9e8a9792ba1ad5513f2068c5d9c26284f793f410b7c4e690316824aa268bda08b7d3eb58c4cb5a974fede7a9881f65a72444474c33bef2f31d99f481a146ba3918caa06f2e3c3966545aea7a5fb0580bde7507f979d3616bfc4f19aea6e42ef15a22a95b1aba48327006dfbfac1bea98485217c9e7a6eab3f91dbeb72dc1abcc0b767adc9d7776674c34e768e9d259249a508ba5c171f5150c1fc679f4f38d445a7a624f96d8ab4df1fad4461d3f89606061f76a8cdf9025540a1e02a2de5fc8c603a8dd45a193fb3d7b6438539b8773c75ad948831c96608aab2f34", 0xee}, {&(0x7f0000000580)="740013949943812c8f8abc64abc805266452705567efc9c47ac0367fc9b38791c850c2daea43daddebab8ef198c53f6f4ecbd2dc24634726214c16f9c5f7fb714652f26efa22221399a499a30d6b769563fa8a2b4334d57914a3286721b5954b65c36edc1d19e35d4f95d94780db349d38e236ad6685547ad66f866cdfe420bbded83532a8864225816231ec8c40bf79dbe5b804f8990e3e0c976a36f6eea713daad5019fcaaeb0dff4361333d7ca5b6f0cda2d43b97cea79180ea582f0de6803598fb9068ebfc1eef5623469f2eb2d7c4103e34e49df231dfd4a9e5", 0xdc}, {&(0x7f0000000280)="357d4fb76b634c3b77d92346b9fd49a33c476a142cf3b517051abe76d285b68b4b1ab7b593a4e52f8c793c6693224d03d781e4334e6592403b3006594768863a433551f7fd29e170f015513032fe331f0b9b22316f90e04b628ca674448482bb9bad36503cd380feddf7fa84b290378defe5046494", 0x75}, {&(0x7f0000000300)="90ebf0f4f60f0f7e235c75a8cb514cdefb8faa700d102cbf226ecf756e4bfae8e2d5", 0x22}, {&(0x7f0000000680)="10fda13cc37ac867815aa5baf6d74c46a247a4b271cc46e96c6dd256ea86db13181bc831aed011c9c3f4a58df97e13bf16534f", 0x33}, {&(0x7f00000006c0)="9d4dba9cde2a9837e2d58436dfcebb6e110278d035fceb6b65b8df66f15fab9ff50a3c4c681a3e70d1ed845ca331e7b9994e9fe625a2e5b46992476a0f7ed06781530a37ef71f6e2fde7bff56f48bee5f1c96a2c7e514fa6dfbc580fb0e56a425a5515da44989803df8715da4732fc4782e43e3d8e2c2bdba064a7109ba49748618a09719644206f33d4dc93e8d29fca0eb5327346a0070bad97200a2f63070f99c0f0175e68a329b80a531401f0f999fdd791dfb0ad4c509bbdfb3574d094b2dd979415c69e310f732495a1f40fe548b9b84829e69371c6e124727f4b6d0ea09f2bafa87cf2d1f09c4342138ef6a5e0c6690c800677ef8d934789ad7ec3bcda13469e3d0849b560a0c85461b912a5fb12b73018ec7404dfb8bd09216fc10469d49656f3a6a482574a49d89b44c995de487b4d61cdca4c2bfd12acfe3888eaebb2325dddf2bd0c1caa57395a45bccfe9632b3e173632d22a1f7a8c75e63dea9220889712bdff3ca8d5eca2d84549e1fbaa455134ca9bbbdfa20d39ec9f5770302b1fd7701c62d6110720dbdd8dea5b03abaec5804aba8ad96d7d7819db52e7cbbdc3cc378e0517da9163236c24e6189bb37fef7c919acf364b050d2a95e62347ff8f18cd10b70694b822f73f6bc5c792dbbe08842b17cf640ea743a13d174055d99904aab68d08b54b64e00e2d81be4b73202a8d9f76768380d4d131f9935b39f0798a2f11f268e483a35708d1db3865a565927d3898f3266eb0f4148427e21b695eb119fbc2bd6313c8bbab5d323cccd156f1fcad9d7ccf9dec917d4db696dbc8b4e820b8b850283f152d7530e759fbb47626026aec3b1fdbc0ab899164b16d361ec81d42ce6ab5ffa3b16b43a1abfb959958cc0ea86aa161b5529438f1e9d606e792b94e090c8dcd276add1d8611097fca05fd1202163fa34e8beb5c5e51dc56b6e5b5f2419c88c02c72e8629938d89428ef4b89deabf696e972d3528f2873f0c95a34152a9daebe61e0555d912da52c3ecca6fa3c92a6f8603292e4020d291ce4309fc94b860239ea3a2b73dde14e0a0b0d4a4bbe98b54c6c6e10713490570b633788f543a02f8ed3e9d221f22c581182593adc5e4203a17fd9cbd8658d16fd3a7b591b6aa8674b0352e9236a6f9cd4b18798ad6c899f88864806186cd3dbf880fe6eef7e8d1812df001f74f2965c45d435ef97a745e470c8c3ac38ecc16d4253b42f4b204cdce83022649b375fc4246736b59146ae227309c5202d470b8092ec8cff709100b4eb3a50975ecdcf3151534860839a35099f7a25a3660872c43cdda8f8ba1f1fc197dca8d0a82c48b50894cd1ce8c46cbc034da158254c2c58602c3aad4ac68680e238c2b81d338bd3b942fd24d0d00940bcf84d7fadcec259c504afe909d14d9ac7d43ec07d4005b9d7e1657b595424f47fb104157e5aa89f12d7439b4f62982a1970d993f78acf44d6fbe0c822c47aec349cfe7eb9443a2ce729506af1e3f2fb2699bf4490a0f769d505bfa670ebcfb60f8fa4900064c04935d85c3e25b521d40369947688d7b847fb220d9ee465020eede411f9b2cf2c87d6cf0347e2ff8cc987c7d09487705267d2d5d1edc73f47bb8cdd44a78b7e52c922d68031774faac2eb2eb423536a14dcd684e9399dec609ea17db79e4df4a897e63a730018d4c3741ecdef558abf04273b63df13e4f63ffa8242663a3459997fd3d1b20feb527a6c5fb4b9e5fad048c2f2b9f84955b468e83535ccfaa9060991bb4bfb4c2ddc5ed76727d56b06bfd74224cb02c2ec2010f1e852bf9b1ecf1c5c6fbd9757bdf6dce520f29a66afb7333dc70222cd7afa582f138b442b221ffdc00d3030f5f3c073384d15f15c10e6ea676bb4d04ba6848aeb5b582ca3479eca134e05a589f1f7ed08a049bb186de2b2ca554322a7fcbe6b6e41727906aa192fc4ab33ab03e2859590e2d6b632ecdf283d0a2f0ae0a524032d496092a9fa15874fa24d2eec586fa792bedfc66811fb1a267baa6e2d9e00ee32483435cd8f27450d5cd5f2d8b82b05737ea29c2c90e450ee6c1b2a0ba85eb9333de17927424b2c467bef922b3431d2272ba5a70171931ebde60a8643569975ed7525d5e62c0550dbae7eb969da5669542286cc2bc778375be503ab7fe762e5fd518dcb3c737983131fccc3bce10be1a8ce912267c7668425f03cd97f1c29b2df33c24abfb3db10946902af6d94017b3b68d543615faef3b6020b5500c6fc0030309b949e2ad340af6b1a9ed91cf41f51bf9a18a9e34d57a1f5b380ffdd16eb6dbaa55f3a731581c5a198df720a95e885de1b0570907a5d06c08bfccec75c71c92ce1556f77260c0f675b99fcc3972029c709a5234af17e5c5461f39ed82725b722636fc7ccd14550fed8e894e3bfd5f19bddaabda4476e41306a73d73eba39f3578f9b4ffcbc6b26bd6f620c0b342741fa0d76019894b3ff1b4cdc5a6b7bec5f05704c337fc35d4093673cfd93005b601c2948295141e1275f98b857563bf40bd1da24191f70101e965804c454aad704ca40e355fc77a1be77ffdfa8b2200664eb34cb57c160e558f7a34cc4d196951294eca74590fb9d024d614b0521fce9b17035d0ec67693fae02fe5783dd24d3685806069b5d0116647b6ddc8af92de507a47e35377900a9c75f8d0b3df5bafb0c5f540b0ff1a65248c8c466596d62c4fc10234628908d3b6b37f081ef8e3b94bfdf1e3d6656618d77c437a640814e827b82f3adecc11405cc61faebe596c630c600dd7cdca97f9c9a932180e4524f2e166415e355d6d40b1974db6d555cd34b1cca0ec2882e24fa7656c75008310e6271a28db770161fe3554c493934ca130eab3eccd85e2e9aead8ea0295dafd8132a49551f7d750964e3efc527171825baf72ad6d07b5fd6f5e7c3ac164ad220dde14e5446825a128be1cad092b13da8548310992353cebdf1ecc637de7a25e46840a3769d3d34ae1d74c8107cb265b8b500c373d6098659fc524b2ae7e3fe6c22225f623427914e11535303e2abe96dbd6b399c7e6fc9efe269a04390c2767a89a2eceaa14bfea013abc4b7731fa5ae89e2cd25484a6d684443d768cf147ec8f6cc55a74bd67399611f9926311c335a0a042159b9d903919b6fb80e2f9c8fb8233eb6c6017eff22b453e3372948a793bd40d31698574d034dacba471a935b1cd9d78fd1f7e39ae3a3461d1f0c4139f5138297a47b10162947c38b740e8115cf0ca300fae93a53073eae8b1d296789ad373ce813f0f9c1fbed87ea87029af2cbc4f060149bc037269961cec9dce6fe24a4ed9225c4500ba5428d9698a64968fc6e54da255c5b500481fb2339f7b7aa3baa7a1347f9324152c0836e43a5e21614f9621e65b577f0975bd5c7db772d2e9bdc6ed65d9783ef1b59f8d3510e7ddde9c3fc1e7641ea85d83561d3d50fedebefcba2e1b75efa4ba8803881e967d53f6439a0f61a241ec101533463cce0fce6cc0f7c4cb600f1b694ffa8c676fee0af11ba844c14bd21691e2e015888b20ee83f78e9240786f089645730d0299cc01ed3e37e530789116010b9f11bc26603770468c7c973a85d49b3cb2f9987831456122cdbb1d273472156861dd32a2257ed88cb7cb0d8b8b3d25cc0d7d0a31b7e9c8c8e9d7e36595e6702bd84d5916c6858377d81915c4d1eb276ce0ece43ca5007d44bbf066d9cc5c209eaa7523a2be2eaa9e7224197bb3f44fea210ab4c87979fbd55e3cf32b57e4bb636a058955abe07c11c2448fee1055ee67f2f81de16494e0c7d1ac31cdff1a67afd24d966024c16226ce48531da109877b50b99b24f35c254307f198ee49398591d58590e9bdd8de4750d14cc23aa68cd53ae5f4ba0df5908ee5eee70eda24fc7f852bcb912d84e6c7cf410ca7477115b87de44f95b387961d255d3c54375a09d101be85339426ea8b6b0a39b41f689a4649169eae6e4cc7dc0be6f054a2bf6aac36455ca93b66e50164e356bab86d8bcc63e2c02c6b21010b78232c257a7d686a0a41f09ebc30249dd51b4169d9651b4af77dbe034b775321efd53893fd80265ccdb1dca84f4452b66e363817da2ff19cd761b50cb41b1f74cf82d2ad20e4673ad3d2dd4a41134c6fa4df7c02c777a393e21375b205d79ccb17c48d4cf182bf8584de95ec5046de2fa0f30877ceba6e8f893bd8fbf7b3884874709e18d3a152a72d8459169e9616cde43c712c125e658ec8b9bfee0a1f287569372da341431c4a32b79d678cf7b3577b4bc7604ccbda9c0cbb3cb26f0c212588b7a62a4fa4f56cd5ba344d737284514c41d22cf9f1e30d591f5502868a6a849acdac7aa12f7ecd8d85e5ae7cda0dbfa1d747006f0c0f65389db44ab42d828e46252e29d14a506ce2ec6ee01aee188f9eb89b9c2d11c3dc780ddabd9fa96f5c820594d37fdb71bb5cb4a31f3bbcbee09e8610be6798bcd95566290deeb1671f728b5d6c8af097537a0a04db8a8ca7d640dd0d5eea46b075b7dd0494340adc3646874511e938a37be03c293b38894f74e52c885f3819ef9f71691a3aecce8b9a1f07ccd5d3ee581804adde972aa152fb6c8deb520d238c73b1e24dd28f9a6c7409d768c810cdc1d093510f6bcf8730ebb9f8253ef830ab0e42509902fb6dbf8403ac18c67bb47baceaa31c6073d233ef6edcd44734d720452671df28a999b58c42e52f1b657f83b892ea0912db65d2ba56e68fe7212d05b8b3823ff3a40d68f2ad89e521246c8b9591032fe2cf9af451cf52cd769be602cd5031812168b10c3eecdb0dd3f636e2c59bfd416ee38934da66bcbab33b1921bad1fa62116c0299cac78fdbb27dd245f31eb1106574d3b3cb03c94516da16bdfa353a366ffc8c981ffa6c0288db53b1bbb6a87bc0c558a8b15188f01f7704839bf89f3f75b38baa3f4a1dc085df5e75bd504e116a7f3e85f9d0581fa704c58b307abab992b24916217d3e3a0c36745d5f468e2d8fe6db0a105486da3040b361a4e3090414426b5347af474516c0b7b530ecd73ce949da9c60780c24e781e94405e8c29e1314fc1aa7600cf5a8e8867e4ec97f877ebec06699c8b411427acb0d4c7251d8133104da3bf1838ad02b3d78377050e9cceb5765e33d74ea32edfe089850cdb69feff0c07d08757d1c1b9052d888857ef593ed02587fbf0706c4da433ce5f0ffc8f94e0ecea713375ce3b9e7ae40b7a8dfeb79c13ba20e8f4bbe8d387d90d3fcc592f661faf132f217602b829fe6a31b505e151c36d896092f999f2f29c891651b6934b52ab7e55b70fae8bfdf4f9cbe7b32726c48c65adc271e9c37cb23795b001be65ef7842ec4aa989c18053a7e96441f592057fe8a9c2553e6ea153c4a236199c31150979a97c368e32e41e00d443c9d92e0387437a77d30b0572799071129b8d474bc6745e2f8d6d90249b2c659c9b566f786354c5e02cb75f93030175216182b357071317d22103c9ba19d81bca79a62ef943417c18301d74cba870953e439aadb6990563b65e669abf33c6c2d2a7122e02e5addbdb1f43bd5794967ad278e4979453eafdb6c864893d526ee03db2dcc0964b536fa5989e9729b307faa4ded546b6ec48730b4b74a22c981c0b6cb608747314cbea88efd63f9d2d068c483026a530911e569ff667b64ca27090049a59e0e1be77299968a1ca391dab2ad2a7dcc3c33d7a10d5afa638f567d34decfd3cfb262c0ca449fc055964d4070ee93d0b7791bc40012787804a2a1bdb80be8ba417563d888b90fc7eb7e27e11f83f8c848d12b5634bd86dca66da775ab", 0x1000}, {&(0x7f00000016c0)="3dce451487ede7bd61097d036b590b13cc8874c57059947728d440bf5ea639f2223b89f64b61bdd571e07eaaa196ff13edaa9edc7a2e823bb6073992c4f39cbfd60a5475b53dbc4f2a6e93b5db8042268bc9403a4f85a637738a9ff8d0e56ce8f5e242f950f15537", 0x68}, {&(0x7f0000001740)="27fe0135df", 0x5}], 0x9, r1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x8000, 0x0) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file0', [{0x20, 'nl80211\x00'}, {}, {0x20, 'nl80211\x00'}], 0xa, "77923bafee22530ac5ff0b17a42db94792a65ff55c42f94efc98ea9df2b4cba96e9d089d7d6b1cf1c319253bc5f3da57fdbb2b69de0d9fd687a1e073908a3f135f6db324c149e35cedd129b562b8b404c26be0a25226ebd1dd3b48ae0b"}, 0x7b) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r7, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) [ 987.360080][T24367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8cffffff00000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 987.405373][T24371] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 987.415567][T24370] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:21:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xc202000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 987.448870][T24377] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:21:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xc801000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:16 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, 0xfffffffffffffffd, 0x1) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, r0) 00:21:16 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x500) [ 987.518595][T24376] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xc901000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:19 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:21:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0xf0ffffff}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 00:21:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xefffffff}]}, 0x28}}, 0x0) 00:21:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0xff0f0000, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xcd26000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 990.450130][T24422] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 990.471782][T24423] FAT-fs (loop4): bogus number of reserved sectors 00:21:19 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) [ 990.497038][T24424] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 990.517752][T24423] FAT-fs (loop4): Can't find a valid FAT filesystem 00:21:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xd226000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:19 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:21:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0xc3ffffff}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 00:21:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf6ffffff00000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 990.668030][T24457] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 990.723299][T24458] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:22 executing program 2: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="3222aee4cdfbdb06116b4fb314673ae8c14f0988f2d25857db10aeba0cd87a390c0c2bff1b4998d5cdaf9f5ca1bbae8c5992567ea81de2c616253d9c083212f46ac00b85cc57bca18dc85120f6359d72911895acf35ee14e3ef483c3", 0x5c, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea2bdc9c1587a050000000000000042e33089754c8107c3cd4623dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb7bb50ec93c152fa483198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b0674cc5c1e298a16324fe27da2a908ba9ff3c009d36d691cc7911219a2fd5d", 0xc0, 0xfffffffffffffffe) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f00000018c0)=0x7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x1) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r1, r1}, &(0x7f00000013c0)=""/265, 0x109, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$instantiate_iov(0x14, r0, &(0x7f0000001780)=[{&(0x7f0000000380)="e5e00466148f67167ec577f44501965dc1ba30301a199e2447a5fcaedc736140dd453aacfa411627d9b5bde337cbe3ba824e5c583487b8ea563959f6f4ef56096ce2af9848fdf1aedf47015ee7a24d284bd8d26487c33957207d38af9243ed39cb9dab70e2dbdce7f218ab15a570323ad1f8fdba0477ce8b03da723e0eeca58cd379812651d76ffb7e6a6b840a59e0acb6f50888afbac9b693eaf65c3ee7846af65b9a96d1d8379b977295f374be12a1a1b9fe007c514b5b5202a3088df97a1e9f0e1708817a06", 0xc7}, {&(0x7f0000000480)="7629d7090c07912ee0048586b386ec8f226d9e8a9792ba1ad5513f2068c5d9c26284f793f410b7c4e690316824aa268bda08b7d3eb58c4cb5a974fede7a9881f65a72444474c33bef2f31d99f481a146ba3918caa06f2e3c3966545aea7a5fb0580bde7507f979d3616bfc4f19aea6e42ef15a22a95b1aba48327006dfbfac1bea98485217c9e7a6eab3f91dbeb72dc1abcc0b767adc9d7776674c34e768e9d259249a508ba5c171f5150c1fc679f4f38d445a7a624f96d8ab4df1fad4461d3f89606061f76a8cdf9025540a1e02a2de5fc8c603a8dd45a193fb3d7b6438539b8773c75ad948831c96608aab2f34", 0xee}, {&(0x7f0000000580)="740013949943812c8f8abc64abc805266452705567efc9c47ac0367fc9b38791c850c2daea43daddebab8ef198c53f6f4ecbd2dc24634726214c16f9c5f7fb714652f26efa22221399a499a30d6b769563fa8a2b4334d57914a3286721b5954b65c36edc1d19e35d4f95d94780db349d38e236ad6685547ad66f866cdfe420bbded83532a8864225816231ec8c40bf79dbe5b804f8990e3e0c976a36f6eea713daad5019fcaaeb0dff4361333d7ca5b6f0cda2d43b97cea79180ea582f0de6803598fb9068ebfc1eef5623469f2eb2d7c4103e34e49df231dfd4a9e5", 0xdc}, {&(0x7f0000000280)}, {&(0x7f0000000300)="90ebf0f4f60f0f7e235c75a8cb514cdefb8faa700d102cbf226ecf756e4bfae8e2d5", 0x22}, {&(0x7f0000000680)="10fda13cc37ac867815aa5baf6d74c46a247a4b271cc46e96c6dd256ea86db13181bc831aed011c9c3f4a58df97e13bf16534f", 0x33}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="3dce451487ede7bd61097d036b590b13cc8874c57059947728d440bf5ea639f2223b89f64b61bdd571e07eaaa196ff13edaa9edc7a2e823bb6073992c4f39cbfd60a5475b53dbc4f2a6e93b5db8042268bc9403a4f85a637738a9ff8d0e56ce8f5e242f950f15537", 0x68}, {&(0x7f0000001740)="27fe0135df", 0x5}], 0x9, r1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x8000, 0x0) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file0', [{0x20, 'nl80211\x00'}, {}, {0x20, 'nl80211\x00'}], 0xa, "77923bafee22530ac5ff0b17a42db94792a65ff55c42f94efc98ea9df2b4cba96e9d089d7d6b1cf1c319253bc5f3da57fdbb2b69de0d9fd687a1e073908a3f135f6db324c149e35cedd129b562b8b404c26be0a25226ebd1dd3b48ae0b"}, 0x7b) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r7, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) 00:21:22 executing program 0: ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x14) 00:21:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf903000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:21:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xf0ffffff}]}, 0x28}}, 0x0) 00:21:22 executing program 0: ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x14) 00:21:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) [ 993.521663][T24494] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf9fdffff00000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:22 executing program 0: ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x14) [ 993.602005][T24497] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:21:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfbffffff00000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x88470000}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) [ 993.645251][T24503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 993.748671][T24523] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:21:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:25 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:21:25 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x14) 00:21:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfdfdffff00000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xfcffffff}]}, 0x28}}, 0x0) 00:21:25 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) [ 996.569588][T24547] FAULT_INJECTION: forcing a failure. [ 996.569588][T24547] name failslab, interval 1, probability 0, space 0, times 0 [ 996.593654][T24547] CPU: 1 PID: 24547 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 996.602184][T24547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.612752][T24547] Call Trace: [ 996.616160][T24547] dump_stack+0x10f/0x19d [ 996.620492][T24547] should_fail+0x23c/0x250 [ 996.624930][T24547] __should_failslab+0x81/0x90 [ 996.629692][T24547] should_failslab+0x5/0x20 [ 996.634299][T24547] slab_pre_alloc_hook+0x20/0xd0 [ 996.639323][T24547] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 996.645056][T24547] __kmalloc+0x78/0x310 [ 996.649316][T24547] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 996.651117][T24554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 996.655115][T24547] tomoyo_realpath_from_path+0x98/0x3c0 [ 996.655132][T24547] tomoyo_path_number_perm+0xc1/0x2d0 [ 996.655154][T24547] ? __rcu_read_unlock+0x4b/0x260 [ 996.680640][T24547] tomoyo_file_ioctl+0x1c/0x20 [ 996.685452][T24547] security_file_ioctl+0x45/0x90 [ 996.690413][T24547] __se_sys_ioctl+0x48/0x140 [ 996.695087][T24547] __x64_sys_ioctl+0x3f/0x50 [ 996.699757][T24547] do_syscall_64+0x39/0x80 [ 996.704452][T24547] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 996.710704][T24547] RIP: 0033:0x45d239 [ 996.714682][T24547] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 996.736712][T24547] RSP: 002b:00007f8e24566c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 996.745301][T24547] RAX: ffffffffffffffda RBX: 00000000000189c0 RCX: 000000000045d239 [ 996.753284][T24547] RDX: 0000000000000001 RSI: 000000000000540b RDI: 0000000000000003 [ 996.761562][T24547] RBP: 00007f8e24566ca0 R08: 0000000000000000 R09: 0000000000000000 00:21:25 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x14) [ 996.769561][T24547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.778509][T24547] R13: 00007fffc1e4dd9f R14: 00007f8e245679c0 R15: 000000000118cf4c [ 996.778614][T24557] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xff00000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:25 executing program 4: ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2) 00:21:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xffffa888}]}, 0x28}}, 0x0) 00:21:25 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) [ 996.815778][T24547] ERROR: Out of memory at tomoyo_realpath_from_path. 00:21:25 executing program 4: ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2) [ 996.884802][T24572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 996.901734][T24573] FAULT_INJECTION: forcing a failure. [ 996.901734][T24573] name failslab, interval 1, probability 0, space 0, times 0 [ 996.942498][T24573] CPU: 0 PID: 24573 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 996.950840][T24573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.961949][T24573] Call Trace: [ 996.965237][T24573] dump_stack+0x10f/0x19d [ 996.969571][T24573] should_fail+0x23c/0x250 [ 996.974007][T24573] __should_failslab+0x81/0x90 [ 996.979152][T24573] should_failslab+0x5/0x20 [ 996.984078][T24573] slab_pre_alloc_hook+0x20/0xd0 [ 996.989233][T24573] ? tomoyo_encode2+0x1e2/0x350 [ 996.994067][T24573] __kmalloc+0x78/0x310 [ 996.998399][T24573] ? tomoyo_encode2+0x1e2/0x350 [ 997.003326][T24573] tomoyo_encode2+0x1e2/0x350 [ 997.007996][T24573] tomoyo_realpath_from_path+0x36e/0x3c0 [ 997.014081][T24573] tomoyo_path_number_perm+0xc1/0x2d0 [ 997.019457][T24573] ? __rcu_read_unlock+0x4b/0x260 [ 997.024509][T24573] tomoyo_file_ioctl+0x1c/0x20 [ 997.030316][T24573] security_file_ioctl+0x45/0x90 [ 997.035257][T24573] __se_sys_ioctl+0x48/0x140 [ 997.039932][T24573] __x64_sys_ioctl+0x3f/0x50 [ 997.044601][T24573] do_syscall_64+0x39/0x80 [ 997.049106][T24573] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 997.054990][T24573] RIP: 0033:0x45d239 [ 997.058980][T24573] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 997.080152][T24573] RSP: 002b:00007f8e24566c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 997.090901][T24573] RAX: ffffffffffffffda RBX: 00000000000189c0 RCX: 000000000045d239 [ 997.099124][T24573] RDX: 0000000000000001 RSI: 000000000000540b RDI: 0000000000000003 [ 997.107083][T24573] RBP: 00007f8e24566ca0 R08: 0000000000000000 R09: 0000000000000000 [ 997.115043][T24573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.123015][T24573] R13: 00007fffc1e4dd9f R14: 00007f8e245679c0 R15: 000000000118cf4c [ 997.148474][T24573] ERROR: Out of memory at tomoyo_realpath_from_path. [ 997.170731][T24577] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xff0f000000000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:26 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x14) 00:21:26 executing program 4: ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2) 00:21:26 executing program 2 (fault-call:1 fault-nth:2): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:21:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xffffff7f}]}, 0x28}}, 0x0) 00:21:26 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2) 00:21:26 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x0) [ 997.770434][T24609] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:26 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:21:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfffdffff00000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:26 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x0) 00:21:26 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x2, 0x1) [ 997.876962][T24625] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff7f00000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:27 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2) 00:21:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xffffff9e}]}, 0x28}}, 0x0) 00:21:27 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x0) 00:21:27 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x10, 0x1) 00:21:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffff00000000, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:28 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x2400, 0x1) 00:21:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:28 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2) [ 998.991335][T24664] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:28 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x330b, 0x1) 00:21:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffff0700, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 999.132225][T24672] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x0) 00:21:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x4600, 0x1) 00:21:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffff7f, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xffffffc3}]}, 0x28}}, 0x0) 00:21:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x0) [ 1002.022825][T24715] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x4b3a, 0x1) 00:21:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x0) 00:21:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x4c01, 0x1) [ 1002.192014][T24723] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1002.296438][T24751] FAT-fs (loop1): bogus number of reserved sectors [ 1002.311657][T24751] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1002.352296][T24751] FAT-fs (loop1): bogus number of reserved sectors [ 1002.359196][T24751] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:33 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5409, 0x1) 00:21:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xffffffef}]}, 0x28}}, 0x0) 00:21:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:33 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540a, 0x1) [ 1004.232925][T24776] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1004.244637][T24777] FAT-fs (loop1): bogus number of reserved sectors [ 1004.272864][T24777] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:33 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540c, 0x1) [ 1004.370568][T24777] FAT-fs (loop1): bogus number of reserved sectors [ 1004.388591][T24784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1004.388696][T24777] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:34 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540d, 0x1) 00:21:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xfffffff0}]}, 0x28}}, 0x0) 00:21:34 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5411, 0x1) [ 1005.125908][T24819] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1005.144866][T24820] FAT-fs (loop1): bogus number of reserved sectors [ 1005.158323][T24820] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1005.240609][T24827] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1005.274797][T24820] FAT-fs (loop1): bogus number of reserved sectors [ 1005.297445][T24820] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:36 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5412, 0x1) 00:21:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xfffffffc}]}, 0x28}}, 0x0) 00:21:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) [ 1007.269892][T24858] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1007.286375][T24859] FAT-fs (loop1): bogus number of reserved sectors 00:21:36 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5413, 0x1) [ 1007.311489][T24859] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:36 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5414, 0x1) [ 1007.405574][T24859] FAT-fs (loop1): bogus number of reserved sectors [ 1007.414497][T24859] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1007.458644][T24868] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:37 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:21:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:37 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5415, 0x1) 00:21:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x10}}, 0x0) [ 1008.152676][T24904] FAULT_INJECTION: forcing a failure. [ 1008.152676][T24904] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.160812][T24906] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1008.181579][T24904] CPU: 1 PID: 24904 Comm: syz-executor.0 Not tainted 5.8.0-syzkaller #0 [ 1008.190096][T24904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.200163][T24904] Call Trace: [ 1008.203440][T24904] dump_stack+0x10f/0x19d [ 1008.207833][T24904] should_fail+0x23c/0x250 [ 1008.212347][T24904] __should_failslab+0x81/0x90 [ 1008.212353][T24907] FAT-fs (loop1): bogus number of reserved sectors [ 1008.212363][T24907] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1008.217192][T24904] should_failslab+0x5/0x20 [ 1008.217203][T24904] slab_pre_alloc_hook+0x20/0xd0 [ 1008.217214][T24904] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 1008.217223][T24904] __kmalloc+0x78/0x310 [ 1008.217240][T24904] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 1008.255609][T24904] tomoyo_realpath_from_path+0x98/0x3c0 [ 1008.261137][T24904] tomoyo_path_number_perm+0xc1/0x2d0 [ 1008.266506][T24904] ? __rcu_read_unlock+0x4b/0x260 [ 1008.271528][T24904] tomoyo_file_ioctl+0x1c/0x20 [ 1008.276294][T24904] security_file_ioctl+0x45/0x90 [ 1008.281261][T24904] __se_sys_ioctl+0x48/0x140 [ 1008.285837][T24904] __x64_sys_ioctl+0x3f/0x50 [ 1008.290437][T24904] do_syscall_64+0x39/0x80 [ 1008.295700][T24904] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1008.301670][T24904] RIP: 0033:0x45d239 [ 1008.305539][T24904] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1008.325455][T24904] RSP: 002b:00007ff6f8d99c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1008.333874][T24904] RAX: ffffffffffffffda RBX: 00000000000189c0 RCX: 000000000045d239 [ 1008.341883][T24904] RDX: 0000000000000002 RSI: 0000000040045436 RDI: 0000000000000003 00:21:37 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5416, 0x1) [ 1008.350072][T24904] RBP: 00007ff6f8d99ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1008.358129][T24904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1008.366077][T24904] R13: 00007ffef403de1f R14: 00007ff6f8d9a9c0 R15: 000000000118cf4c [ 1008.379654][T24904] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1008.421111][T24907] FAT-fs (loop1): bogus number of reserved sectors [ 1008.427187][T24913] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1008.427854][T24907] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:39 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:21:39 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:21:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5417, 0x1) 00:21:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0xc0}}, 0x0) [ 1010.288682][T24944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1010.300676][T24945] FAULT_INJECTION: forcing a failure. [ 1010.300676][T24945] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.314173][T24943] FAULT_INJECTION: forcing a failure. [ 1010.314173][T24943] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.319417][T24946] FAT-fs (loop1): bogus number of reserved sectors [ 1010.334902][T24943] CPU: 1 PID: 24943 Comm: syz-executor.4 Not tainted 5.8.0-syzkaller #0 [ 1010.343258][T24943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.348701][T24946] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1010.353305][T24943] Call Trace: [ 1010.353325][T24943] dump_stack+0x10f/0x19d [ 1010.353342][T24943] should_fail+0x23c/0x250 [ 1010.372033][T24943] __should_failslab+0x81/0x90 [ 1010.376796][T24943] should_failslab+0x5/0x20 [ 1010.381298][T24943] slab_pre_alloc_hook+0x20/0xd0 [ 1010.386228][T24943] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 1010.392053][T24943] __kmalloc+0x78/0x310 [ 1010.396350][T24943] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 1010.400042][T24949] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1010.402071][T24943] tomoyo_realpath_from_path+0x98/0x3c0 [ 1010.402085][T24943] tomoyo_path_number_perm+0xc1/0x2d0 [ 1010.402142][T24943] ? __rcu_read_unlock+0x4b/0x260 [ 1010.427359][T24943] tomoyo_file_ioctl+0x1c/0x20 [ 1010.432134][T24943] security_file_ioctl+0x45/0x90 [ 1010.437075][T24943] __se_sys_ioctl+0x48/0x140 [ 1010.441772][T24943] __x64_sys_ioctl+0x3f/0x50 [ 1010.446480][T24943] do_syscall_64+0x39/0x80 [ 1010.451005][T24943] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1010.456972][T24943] RIP: 0033:0x45d239 [ 1010.460992][T24943] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:21:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0xec0}}, 0x0) 00:21:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5418, 0x1) [ 1010.481630][T24943] RSP: 002b:00007f105ace0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.490031][T24943] RAX: ffffffffffffffda RBX: 00000000000189c0 RCX: 000000000045d239 [ 1010.497990][T24943] RDX: 0000000000000014 RSI: 0000000040045436 RDI: 0000000000000003 [ 1010.505972][T24943] RBP: 00007f105ace0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1010.514089][T24943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.522057][T24943] R13: 00007ffd5c56febf R14: 00007f105ace19c0 R15: 000000000118cf4c [ 1010.546876][T24945] CPU: 1 PID: 24945 Comm: syz-executor.0 Not tainted 5.8.0-syzkaller #0 [ 1010.555273][T24945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.565317][T24945] Call Trace: [ 1010.568613][T24945] dump_stack+0x10f/0x19d [ 1010.572977][T24945] should_fail+0x23c/0x250 [ 1010.577642][T24945] __should_failslab+0x81/0x90 [ 1010.582397][T24945] should_failslab+0x5/0x20 [ 1010.586893][T24945] slab_pre_alloc_hook+0x20/0xd0 [ 1010.591828][T24945] ? tomoyo_encode2+0x1e2/0x350 [ 1010.596682][T24945] __kmalloc+0x78/0x310 [ 1010.600836][T24945] ? tomoyo_encode2+0x1e2/0x350 [ 1010.605779][T24945] tomoyo_encode2+0x1e2/0x350 [ 1010.610454][T24945] tomoyo_realpath_from_path+0x36e/0x3c0 [ 1010.616092][T24945] tomoyo_path_number_perm+0xc1/0x2d0 [ 1010.621476][T24945] ? __rcu_read_unlock+0x4b/0x260 [ 1010.626490][T24945] tomoyo_file_ioctl+0x1c/0x20 [ 1010.631247][T24945] security_file_ioctl+0x45/0x90 [ 1010.636269][T24945] __se_sys_ioctl+0x48/0x140 [ 1010.640852][T24945] __x64_sys_ioctl+0x3f/0x50 [ 1010.645528][T24945] do_syscall_64+0x39/0x80 [ 1010.650025][T24945] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1010.655902][T24945] RIP: 0033:0x45d239 [ 1010.659788][T24945] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1010.679622][T24945] RSP: 002b:00007ff6f8d99c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.688204][T24945] RAX: ffffffffffffffda RBX: 00000000000189c0 RCX: 000000000045d239 [ 1010.696358][T24945] RDX: 0000000000000002 RSI: 0000000040045436 RDI: 0000000000000003 [ 1010.704337][T24945] RBP: 00007ff6f8d99ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1010.712298][T24945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.720346][T24945] R13: 00007ffef403de1f R14: 00007ff6f8d9a9c0 R15: 000000000118cf4c [ 1010.738781][T24945] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1010.745858][T24943] ERROR: Out of memory at tomoyo_realpath_from_path. 00:21:39 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) [ 1010.782240][T24946] FAT-fs (loop1): bogus number of reserved sectors [ 1010.802682][T24946] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:39 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) [ 1010.834346][T24969] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x541b, 0x1) 00:21:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1010.935953][T24975] FAULT_INJECTION: forcing a failure. [ 1010.935953][T24975] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.991358][T24975] CPU: 0 PID: 24975 Comm: syz-executor.4 Not tainted 5.8.0-syzkaller #0 [ 1010.999697][T24975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1011.009848][T24975] Call Trace: [ 1011.013742][T24975] dump_stack+0x10f/0x19d [ 1011.018051][T24975] should_fail+0x23c/0x250 [ 1011.022479][T24975] __should_failslab+0x81/0x90 [ 1011.027230][T24975] should_failslab+0x5/0x20 [ 1011.031716][T24975] slab_pre_alloc_hook+0x20/0xd0 [ 1011.036644][T24975] ? tomoyo_encode2+0x1e2/0x350 [ 1011.041556][T24975] __kmalloc+0x78/0x310 [ 1011.045723][T24975] ? tomoyo_encode2+0x1e2/0x350 [ 1011.050579][T24975] tomoyo_encode2+0x1e2/0x350 [ 1011.055353][T24975] tomoyo_realpath_from_path+0x36e/0x3c0 [ 1011.060967][T24975] tomoyo_path_number_perm+0xc1/0x2d0 [ 1011.066400][T24975] ? __rcu_read_unlock+0x4b/0x260 [ 1011.072631][T24975] tomoyo_file_ioctl+0x1c/0x20 [ 1011.077385][T24975] security_file_ioctl+0x45/0x90 [ 1011.082357][T24975] __se_sys_ioctl+0x48/0x140 [ 1011.086925][T24975] __x64_sys_ioctl+0x3f/0x50 [ 1011.091845][T24975] do_syscall_64+0x39/0x80 [ 1011.096245][T24975] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1011.102111][T24975] RIP: 0033:0x45d239 [ 1011.106703][T24975] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1011.126818][T24975] RSP: 002b:00007f105ace0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1011.136359][T24975] RAX: ffffffffffffffda RBX: 00000000000189c0 RCX: 000000000045d239 [ 1011.144391][T24975] RDX: 0000000000000014 RSI: 0000000040045436 RDI: 0000000000000003 [ 1011.152436][T24975] RBP: 00007f105ace0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1011.161273][T24975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1011.170059][T24975] R13: 00007ffd5c56febf R14: 00007f105ace19c0 R15: 000000000118cf4c 00:21:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:40 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:21:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x541d, 0x1) 00:21:40 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x2, 0x2) [ 1011.209951][T24975] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1011.223805][T24985] FAT-fs (loop1): bogus number of reserved sectors [ 1011.238469][T24985] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1011.248560][T24972] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:40 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x10, 0x2) 00:21:40 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:21:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x33fe0}}, 0x0) 00:21:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x541e, 0x1) 00:21:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) [ 1011.351593][T24985] FAT-fs (loop1): bogus number of reserved sectors [ 1011.360598][T24985] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:40 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x330f, 0x2) 00:21:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:21:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x9, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x541e, 0x1) [ 1011.441322][T25016] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:40 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x4b41, 0x2) 00:21:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x2, 0x14) 00:21:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5420, 0x1) [ 1011.580199][T25036] FAT-fs (loop1): bogus number of reserved sectors [ 1011.610129][T25016] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) [ 1011.656945][T25036] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5421, 0x1) 00:21:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x20000068}}, 0x0) 00:21:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x10, 0x14) 00:21:40 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x4b61, 0x2) 00:21:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5423, 0x1) [ 1011.775061][T25036] FAT-fs (loop1): bogus number of reserved sectors [ 1011.785813][T25036] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:40 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x4b72, 0x2) 00:21:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x4b41, 0x14) 00:21:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5424, 0x1) 00:21:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x7ffff000}}, 0x0) 00:21:41 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x4c00, 0x2) 00:21:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x4c00, 0x14) 00:21:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) [ 1011.988291][T25091] FAT-fs (loop1): bogus number of reserved sectors [ 1012.025773][T25091] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:41 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x4c01, 0x2) 00:21:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5425, 0x1) 00:21:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x4c01, 0x14) [ 1012.176144][T25091] FAT-fs (loop1): bogus number of reserved sectors [ 1012.182679][T25091] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5409, 0x14) 00:21:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xb, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:41 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5409, 0x2) 00:21:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5427, 0x1) 00:21:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540b, 0x14) [ 1012.278069][T25107] __nla_validate_parse: 3 callbacks suppressed [ 1012.278077][T25107] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1012.354577][T25140] FAT-fs (loop1): bogus number of reserved sectors [ 1012.366910][T25140] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0xfffffdef}}, 0x0) 00:21:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5428, 0x1) 00:21:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540c, 0x14) 00:21:41 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540b, 0x2) 00:21:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(0xffffffffffffffff) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) [ 1012.439757][T25140] FAT-fs (loop1): bogus number of reserved sectors [ 1012.456545][T25140] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1012.478926][T25160] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:41 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540c, 0x2) 00:21:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540d, 0x14) 00:21:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5437, 0x1) 00:21:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(0xffffffffffffffff) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) [ 1012.599521][T25176] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:41 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540d, 0x2) 00:21:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x2}, 0x0) 00:21:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540e, 0x14) 00:21:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5441, 0x1) 00:21:41 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540e, 0x2) [ 1012.698107][T25187] FAT-fs (loop1): bogus number of reserved sectors [ 1012.711456][T25187] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(0xffffffffffffffff) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:21:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540f, 0x14) 00:21:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5450, 0x1) [ 1012.789880][T25187] FAT-fs (loop1): bogus number of reserved sectors [ 1012.804366][T25187] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1012.828907][T25203] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:41 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540f, 0x2) 00:21:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xd, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5410, 0x14) 00:21:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5410, 0x2) 00:21:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5451, 0x1) [ 1012.961950][T25223] FAT-fs (loop1): bogus number of reserved sectors [ 1012.970580][T25223] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1012.990918][T25211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1013.014962][T25223] FAT-fs (loop1): bogus number of reserved sectors 00:21:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x8}, 0x0) 00:21:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5412, 0x14) 00:21:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) dup(r1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:21:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5452, 0x1) 00:21:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5412, 0x2) 00:21:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5413, 0x14) [ 1013.056365][T25223] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x545d, 0x1) 00:21:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5413, 0x2) 00:21:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xe, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1013.163621][T25253] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5414, 0x2) 00:21:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5460, 0x1) 00:21:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5414, 0x14) [ 1013.243504][T25260] FAT-fs (loop1): bogus number of reserved sectors [ 1013.251872][T25260] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1013.300380][T25260] FAT-fs (loop1): bogus number of reserved sectors [ 1013.313917][T25260] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1013.341880][T25259] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x300}, 0x0) 00:21:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5415, 0x2) 00:21:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5501, 0x1) 00:21:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5415, 0x14) 00:21:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) dup(r1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:21:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xf, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5416, 0x2) 00:21:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x5509, 0x1) 00:21:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5416, 0x14) [ 1013.480436][T25299] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1013.487459][T25300] FAT-fs (loop1): bogus number of reserved sectors [ 1013.503705][T25300] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5417, 0x2) 00:21:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5417, 0x14) 00:21:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x6364, 0x1) [ 1013.573356][T25300] FAT-fs (loop1): bogus number of reserved sectors [ 1013.583004][T25300] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1013.612081][T25302] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x2}, 0x0) 00:21:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5418, 0x2) 00:21:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) dup(r1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:21:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5418, 0x14) 00:21:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x890c, 0x1) 00:21:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x541b, 0x2) 00:21:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x541a, 0x14) 00:21:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x541b, 0x14) [ 1013.741771][T25339] FAT-fs (loop1): bogus number of reserved sectors [ 1013.754142][T25342] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1013.779870][T25339] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x8912, 0x1) 00:21:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x541d, 0x2) [ 1013.836888][T25339] FAT-fs (loop1): bogus number of reserved sectors [ 1013.846768][T25339] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x3}, 0x0) 00:21:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x541e, 0x2) 00:21:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x8933, 0x1) 00:21:43 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x541d, 0x14) 00:21:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x11, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:43 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x400442c8, 0x1) 00:21:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x541e, 0x2) 00:21:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5420, 0x2) [ 1014.117344][T25390] FAT-fs (loop1): bogus number of reserved sectors [ 1014.131965][T25390] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:43 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x541e, 0x14) 00:21:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x400448c9, 0x1) [ 1014.203865][T25390] FAT-fs (loop1): bogus number of reserved sectors [ 1014.210538][T25390] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5421, 0x2) 00:21:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x4}, 0x0) 00:21:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x12, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:43 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:43 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x541e, 0x14) 00:21:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5422, 0x2) 00:21:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x400448dd, 0x1) 00:21:43 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5420, 0x14) 00:21:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5423, 0x2) [ 1014.429049][T25430] FAT-fs (loop1): bogus number of reserved sectors [ 1014.453567][T25430] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:43 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5424, 0x2) 00:21:43 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5421, 0x14) 00:21:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40045431, 0x1) 00:21:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x5}, 0x0) [ 1014.603124][T25430] FAT-fs (loop1): bogus number of reserved sectors [ 1014.615589][T25430] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x25, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5425, 0x2) 00:21:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x1) 00:21:43 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5422, 0x14) 00:21:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x400454ca, 0x1) 00:21:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5427, 0x2) 00:21:43 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5423, 0x14) 00:21:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x6}, 0x0) 00:21:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5428, 0x2) 00:21:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x4004550a, 0x1) 00:21:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x48, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:44 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5424, 0x14) 00:21:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40049409, 0x1) [ 1015.533469][T25536] FAT-fs (loop1): bogus number of reserved sectors [ 1015.566735][T25536] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5429, 0x2) 00:21:44 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5425, 0x14) [ 1015.644495][T25536] FAT-fs (loop1): bogus number of reserved sectors [ 1015.658241][T25536] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40085503, 0x1) 00:21:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5437, 0x2) 00:21:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4c, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1015.989407][T25580] FAT-fs (loop1): bogus number of reserved sectors [ 1016.000334][T25580] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1016.051170][T25580] FAT-fs (loop1): bogus number of reserved sectors [ 1016.060390][T25580] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:45 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:45 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5427, 0x14) 00:21:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x8}, 0x0) 00:21:45 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40086602, 0x1) 00:21:45 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5441, 0x2) 00:21:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x5c, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:45 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5428, 0x14) 00:21:45 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5450, 0x2) 00:21:45 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40095505, 0x1) [ 1016.425037][T25610] FAT-fs (loop1): bogus number of reserved sectors [ 1016.461638][T25610] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:45 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5451, 0x2) 00:21:45 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5429, 0x14) [ 1016.553120][T25610] FAT-fs (loop1): bogus number of reserved sectors [ 1016.575355][T25610] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:45 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40186366, 0x1) 00:21:46 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x60, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:46 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5452, 0x2) 00:21:46 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5432, 0x14) 00:21:46 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x4020940d, 0x1) 00:21:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x9}, 0x0) 00:21:46 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x4030582a, 0x1) 00:21:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x68, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:46 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x545c, 0x2) 00:21:46 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5437, 0x14) 00:21:46 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x41015500, 0x1) 00:21:46 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5441, 0x14) [ 1017.540450][T25662] __nla_validate_parse: 12 callbacks suppressed [ 1017.540459][T25662] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6c, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5450, 0x14) 00:21:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x545d, 0x2) 00:21:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x80045430, 0x1) 00:21:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xa}, 0x0) 00:21:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x80045432, 0x1) 00:21:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5460, 0x2) 00:21:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5451, 0x14) [ 1020.288303][T25719] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x80045438, 0x1) 00:21:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x74, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5501, 0x2) [ 1020.601253][T25727] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x80045439, 0x1) 00:21:52 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5452, 0x14) 00:21:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5509, 0x2) 00:21:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7a, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:52 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xc}, 0x0) 00:21:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x550c, 0x2) [ 1023.276332][T25779] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x6364, 0x2) 00:21:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x80045440, 0x1) 00:21:52 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x545d, 0x14) 00:21:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x13d, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1023.387175][T25788] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x80085502, 0x1) 00:21:52 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5460, 0x14) 00:21:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x8914, 0x2) 00:21:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x8915, 0x2) 00:21:52 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5501, 0x14) 00:21:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:21:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xf}, 0x0) 00:21:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x80086301, 0x1) 00:21:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1c8, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:53 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5509, 0x14) 00:21:53 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x8933, 0x2) 00:21:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0xc0045878, 0x1) [ 1024.156382][T25849] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:53 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x8946, 0x2) 00:21:53 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x5605, 0x14) [ 1024.222881][T25861] FAT-fs (loop1): bogus number of reserved sectors [ 1024.247815][T25861] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1024.258424][T25859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0xc0045878, 0x1) [ 1024.369929][T25861] FAT-fs (loop1): bogus number of reserved sectors [ 1024.387381][T25861] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x10}, 0x0) 00:21:53 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x6364, 0x14) [ 1024.516800][T25891] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1024.670501][T25895] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:54 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:21:54 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x8982, 0x2) 00:21:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1c9, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0xc0085504, 0x1) 00:21:54 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x890d, 0x14) 00:21:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x60}, 0x0) 00:21:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0xc0189436, 0x1) [ 1025.062944][T25924] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1025.070136][T25927] FAT-fs (loop1): bogus number of reserved sectors [ 1025.098734][T25927] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:54 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x8912, 0x14) 00:21:54 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x89a1, 0x2) [ 1025.174778][T25927] FAT-fs (loop1): bogus number of reserved sectors [ 1025.197552][T25927] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:54 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x400448c9, 0x2) 00:21:54 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x8933, 0x14) 00:21:54 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x400448dd, 0x2) [ 1025.228526][T25934] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:54 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:21:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0xc020660b, 0x1) 00:21:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x204, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:54 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0xf505, 0x14) 00:21:54 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045431, 0x2) 00:21:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x300}, 0x0) 00:21:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x2) 00:21:55 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40042408, 0x14) [ 1025.962378][T25988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1025.992271][T25992] FAT-fs (loop1): bogus number of reserved sectors 00:21:55 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x400454ca, 0x2) 00:21:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x3) [ 1026.020887][T25992] FAT-fs (loop1): Can't find a valid FAT filesystem 00:21:55 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x4004550a, 0x2) 00:21:55 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40049409, 0x2) [ 1026.100162][T25992] FAT-fs (loop1): bogus number of reserved sectors [ 1026.107954][T25992] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1026.219133][T26004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x400448c9, 0x14) 00:21:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x5) 00:21:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x236, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:57 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40085503, 0x2) 00:21:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x500}, 0x0) 00:21:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x400448dd, 0x14) 00:21:58 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x300) [ 1029.000161][T26034] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40085507, 0x2) 00:21:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045431, 0x14) 00:21:58 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="7a10550f32f392981d805e3b8cd226c9", 0x10) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r1, 0x540b, 0x1) 00:21:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40095505, 0x2) 00:21:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x237, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1029.127433][T26043] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x400454ca, 0x14) 00:21:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40186366, 0x2) 00:21:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045506, 0x14) 00:21:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x600}, 0x0) [ 1029.372830][T26090] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1029.466804][T26098] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:21:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x4020940d, 0x2) 00:21:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2c2, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:21:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff, 0xf866, 0x80000}) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'macvlan1\x00', {0xffe}, 0x800}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000340)={0x0, 'vlan0\x00', {0x2}, 0x1f}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r1, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x481}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={0x0, 0xb1, 0xffff6ee1}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={0x0, 0x3bf7, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x6, 0xfffffff9}) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x100) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r2, 0xfffffff8, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff, 0x7fffffff, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000180)={0x0, 0x3, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000100)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x4b41, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x0, r3, 0x162, 0x80000}) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:21:59 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x4004550a, 0x14) 00:21:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x900}, 0x0) 00:21:59 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045564, 0x14) [ 1030.676380][T26123] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1030.708650][T26124] FAT-fs (loop1): bogus number of reserved sectors 00:21:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x4020ae46, 0x2) 00:21:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40305828, 0x2) [ 1030.765914][T26124] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1030.800855][T26131] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:21:59 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40049409, 0x14) 00:21:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x41015500, 0x2) 00:21:59 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={0x20, r2, 0x4e559e2353b8c5d5, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048010}, 0x14) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r3, 0x540b, 0x1) [ 1030.882230][T26124] FAT-fs (loop1): bogus number of reserved sectors [ 1030.892693][T26124] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:22:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x300, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xa00}, 0x0) 00:22:02 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80045430, 0x2) 00:22:02 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40085503, 0x14) 00:22:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) poll(&(0x7f0000000000)=[{r0, 0x4007}], 0x1, 0x5) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r1, 0x540b, 0x1) [ 1033.733801][T26177] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:02 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x4008b100, 0x14) 00:22:02 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80045432, 0x2) [ 1033.782390][T26181] FAT-fs (loop1): bogus number of reserved sectors [ 1033.809034][T26181] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:02 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40095505, 0x14) 00:22:02 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80045438, 0x2) 00:22:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540b, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00') [ 1033.883103][T26184] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:03 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40186366, 0x14) [ 1033.951658][T26181] FAT-fs (loop1): bogus number of reserved sectors [ 1033.962724][T26181] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:22:05 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80045439, 0x2) 00:22:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3f9, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:05 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x4020940d, 0x14) 00:22:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xc00}, 0x0) 00:22:05 executing program 2: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) read$usbmon(r1, &(0x7f0000000200)=""/144, 0x90) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@buf) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r3, 0x540b, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bind$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) ioctl$VIDIOC_G_STD(r7, 0x80085617, &(0x7f0000000140)) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000000)) 00:22:05 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80045440, 0x2) 00:22:05 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x4030582a, 0x14) [ 1036.798473][T26237] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:05 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x405c5503, 0x14) 00:22:05 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80085502, 0x2) 00:22:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x402, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) [ 1036.969422][T26243] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1037.003906][T26269] FAT-fs (loop1): bogus number of reserved sectors [ 1037.017073][T26269] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1037.100687][T26269] FAT-fs (loop1): bogus number of reserved sectors [ 1037.107945][T26269] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:22:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x41015500, 0x14) 00:22:08 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80086301, 0x2) 00:22:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) splice(r2, 0x0, r1, 0x0, 0x10000, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) r3 = gettid() ptrace$setopts(0x4200, r3, 0x2, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0xa183, 0xaca, r3}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r5, 0x4b41, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000240)=0x1) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="00042abd7000ffdbdf250200000014000200726f73653000000000000000000000000900030073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x20000851) 00:22:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xf00}, 0x0) 00:22:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x406, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r2, 0x0, r1, 0x0, 0x94, 0x9) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000000)) [ 1039.837111][T26297] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:08 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x800c5011, 0x2) 00:22:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80044dfe, 0x14) [ 1039.892763][T26302] FAT-fs (loop1): bogus number of reserved sectors [ 1039.903613][T26302] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:09 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0xc004500a, 0x2) [ 1039.950302][T26302] FAT-fs (loop1): bogus number of reserved sectors [ 1039.959208][T26302] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80045430, 0x14) 00:22:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540b, 0x1) [ 1040.044643][T26305] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x415, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0xc0045878, 0x2) 00:22:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80045432, 0x14) 00:22:11 executing program 2: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) bind$isdn(r0, &(0x7f0000000000)={0x22, 0xce, 0x4, 0x6, 0x40}, 0x6) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r1, 0x540b, 0x1) 00:22:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r1 = dup(r0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0xfffffe9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:22:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x3f00}, 0x0) 00:22:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80045438, 0x14) 00:22:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0xa, 0x2, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000240)={0x40, 0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="77ef982999f600000000000000005c6e2da8dfa7f42138a5f8e7279fe74479000000c06dce", 0x25}, {&(0x7f0000000280)="7fe9a87787e61078eabd4e60c0f6e063425c448a87a78296c4b6ccb2599325c815ff4881e3c04e459140473fb86464bb52295c4dd45d43e72b1a5bbd0ec59ffd057b35b6d0558152cb8cd4de324048d80dd4530006e42b8f5c2e65f6e00f19082aa9ce69d87da53429c617928fbbc7818fa2fb7407dc9733a94f56d39330590a0635c2921653c30291d2e378389f6d917e46ab", 0x93}], 0x2, 0x5) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x104) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000200)={0x6, 0x3}) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000000)={0x0, 0x37, 0x101, 0x400}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0xa, 0x2, 0x0) vmsplice(r7, &(0x7f0000000180), 0x0, 0x8) close(r6) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) splice(r5, 0x0, r6, 0x0, 0x10000, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) [ 1042.923535][T26359] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1042.939825][T26360] FAT-fs (loop1): bogus number of reserved sectors [ 1042.956233][T26360] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0xc0045878, 0x2) 00:22:12 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80045439, 0x14) 00:22:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0xc0085504, 0x2) 00:22:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4, 0xfff7, 0x8, 0x1, 0x7, 0xcd, 0x1}, 0xc) [ 1043.018017][T26360] FAT-fs (loop1): bogus number of reserved sectors [ 1043.031851][T26360] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1043.057698][T26363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x416, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0xc0189436, 0x2) 00:22:12 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80045440, 0x14) 00:22:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0xc020660b, 0x2) [ 1043.274566][T26402] FAT-fs (loop1): bogus number of reserved sectors [ 1043.291323][T26402] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1043.326177][T26402] FAT-fs (loop1): bogus number of reserved sectors [ 1043.332747][T26402] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:22:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x4000}, 0x0) 00:22:14 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x3) 00:22:14 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80047437, 0x14) 00:22:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$inet6_dccp_int(r2, 0x21, 0x5, &(0x7f0000000000)=0x400, 0x4) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r5, 0x42b, 0x0, 0x0, {{}, {}, {0x10, 0x17, {0x0, 0x0, @l2={'eth'}}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x20, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000010) getsockopt$netlink(r3, 0x10e, 0x0, &(0x7f0000000100)=""/117, &(0x7f0000000040)=0x75) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r7) splice(r6, 0x0, r7, 0x0, 0x10000, 0x0) read$char_raw(r7, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/29184], 0x7200) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000080)={"f1cd32b7b1f20e7617ec6b404698ea760832301b69acb8d0f22992c87e37"}) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:22:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x417, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1045.926110][T26423] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1045.955674][T26428] FAT-fs (loop1): bogus number of reserved sectors 00:22:15 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x4) 00:22:15 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80085502, 0x14) [ 1045.977331][T26428] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:15 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x5) 00:22:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:22:15 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80086301, 0x14) [ 1046.051539][T26431] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1046.063169][T26428] FAT-fs (loop1): bogus number of reserved sectors [ 1046.069811][T26428] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x4788}, 0x0) [ 1046.212251][T26463] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1046.325272][T26469] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:22:17 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80e85411, 0x14) 00:22:17 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x6) 00:22:17 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write$P9_RLINK(r1, &(0x7f00000001c0)={0x7, 0x47, 0x2}, 0x7) close(r1) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x1, 0x7, &(0x7f0000000040)=[0x8, 0x5, 0x3, 0x8, 0x4e2, 0x5, 0x100], &(0x7f0000000080)=[0x8, 0x791], &(0x7f00000000c0)=[0x3bb6, 0x80000000, 0x10000, 0x100, 0x10, 0x0, 0xffff, 0x5], &(0x7f0000000100)=[0x4], 0x0, 0x6}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f0000001240)=0xd25) ioctl$TIOCSIG(r2, 0x540b, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4000, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x4b41, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) splice(r5, 0x0, r6, 0x0, 0x10000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000200)={0x1000, 0x2, 0x8, "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"}) ioctl$KDENABIO(r4, 0x4b36) 00:22:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x418, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x4888}, 0x0) 00:22:18 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0xc0045878, 0x14) 00:22:18 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x7) [ 1048.989830][T26496] FAT-fs (loop1): bogus number of reserved sectors [ 1048.992123][T26500] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1049.022846][T26496] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:18 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0xc0045878, 0x14) 00:22:18 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x8) [ 1049.093274][T26496] FAT-fs (loop1): bogus number of reserved sectors [ 1049.100021][T26496] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x419, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:18 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) [ 1049.187743][T26504] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1049.236749][T26529] FAT-fs (loop1): bogus number of reserved sectors [ 1049.243488][T26529] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1049.329459][T26529] FAT-fs (loop1): bogus number of reserved sectors [ 1049.341556][T26529] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:22:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0xc0085504, 0x14) 00:22:21 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2f) 00:22:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x5865}, 0x0) 00:22:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x41a, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r5, 0x4b41, 0x0) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0xc) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) close(r7) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) chown(&(0x7f0000000000)='./file0/file0\x00', 0x0, r8) chown(&(0x7f0000000100)='./file0/file0\x00', 0x0, r8) ioctl$TUNSETGROUP(r1, 0x400454ce, r8) ioctl$TIOCSIG(r0, 0x540b, 0x1) [ 1052.026083][T26556] FAT-fs (loop1): bogus number of reserved sectors [ 1052.042898][T26556] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1052.047075][T26562] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:21 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="06d1c13f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x1c) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r1, 0xa1ba, 0x3, 0x0, 0x101, 0x7ffffffc}, 0x14) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r2, 0x40045436, 0x2) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x401, 0x101200) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r4, 0x4b41, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000100)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r5, 0x4b41, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000000c0)={0xfffffff, 0x7, 0x817, r5, 0x0, &(0x7f0000000080)={0xbe475e34f09e2e7e, 0x5, [], @string=&(0x7f0000000040)=0xbe}}) 00:22:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0xc0185879, 0x14) 00:22:21 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x25) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r4}, 0x8) [ 1052.093832][T26556] FAT-fs (loop1): bogus number of reserved sectors [ 1052.128988][T26556] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:21 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000040)={0x1, 0x1, [0x6, 0x4, 0x0, 0xfc, 0x6, 0xec000000, 0x2b, 0x3f]}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x10000, 0x0) write$UHID_CREATE2(r2, &(0x7f00000000c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xa8, 0x200, 0x6, 0x63, 0x8000, 0xfffffff7, "61fdc18098f6a8524aa78ecefb3ef34f7121f4c0cf6e2bd6640e8311e57bd4ef7f914ebca1e9c0d612198e858b1ac480153f5987632dd6670cb1b174dd4bed5351a922273b6e7395eb5cbb345adbc3e8e7d085d100e12ce04918c7c21eebad2dd94af0cfe30f69471dda18bb0503786620bab9e9ec3099c246f09c4cb94f80c58b3e3f9ffa08a243be3799dd16c0a7d7d01ddd25f4f98bec98c943ea63bef86a94c1d39d3998ee8f"}}, 0x1c0) 00:22:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0xc0189436, 0x14) 00:22:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x41b, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1052.307226][T26565] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1052.367231][T26594] FAT-fs (loop1): bogus number of reserved sectors [ 1052.379834][T26594] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:22:24 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x4b41, 0x0) pidfd_getfd(r2, r3, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:22:24 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x4000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) r7 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000202000000000000000800000700000108000b00736970000800084000000003"], 0x24}, 0x1, 0x0, 0x0, 0x4040845}, 0x840) splice(r5, 0x0, r6, 0x0, 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x5) r8 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000100)='1\x98.^\xca\xbf\x8e\x87./dev\xafttyxull\b', 0x0, r0) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x810, r2, 0x40) ioctl$TIOCSIG(r1, 0x540b, 0x2f) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_cancel(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x2, 0xffffffffffffffff, &(0x7f0000000280)="cba0657863f534b91077818112c18bd08b2e30ca19886e51730b093aa999376f21a736af8d252c140776970df19725bca3c5787770360f81ff58cde00c26317c71bdc99fa6502f9f2356bef26996b48d20db8059f1e138e9f0d93e85cd1efb6c321023d381298ace593ff0405e7eca1abd", 0x71, 0xfff, 0x0, 0x2}, &(0x7f0000000340)) 00:22:24 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0xc020660b, 0x14) 00:22:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x41c, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x6000}, 0x0) 00:22:24 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0xc0481273, 0x14) [ 1055.062139][T26619] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1055.076544][T26615] FAT-fs (loop1): bogus number of reserved sectors [ 1055.097631][T26615] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:24 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x101) 00:22:24 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x692080, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r1, 0x40045436, 0x2) ioctl$TCSBRKP(r1, 0x5425, 0x656) 00:22:24 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:22:24 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) accept$nfc_llcp(r1, 0x0, &(0x7f0000000200)) ioctl$TIOCSIG(r0, 0x40045436, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0x4000000000006, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f00000001c0)) move_pages(r4, 0xa, &(0x7f0000000080)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil], &(0x7f0000000100)=[0x7ff, 0x2f, 0x20, 0x700, 0xf, 0x3, 0x8], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x2) [ 1055.202791][T26625] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1055.223639][T26615] FAT-fs (loop1): bogus number of reserved sectors 00:22:24 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x3) [ 1055.254428][T26615] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:22:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x41d, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:27 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x4801c1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x0, 0x1, 0xb}) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf8, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004801) 00:22:27 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$TIOCSIG(r0, 0x40045436, 0x8000000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0x14c) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x801) 00:22:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x6558}, 0x0) 00:22:27 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540b, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x30, r3, 0x405, 0x0, 0x0, {0x7e}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fff, 0x3}}]}, 0x30}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000280)=0xb2) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000c0024e3d91755ec56830e2fb03400000000000000000000001b", @ANYRES32=r8, @ANYBLOB="00000000ff5fe94fc6000000090001006866730100008000080002ef0a41dac22b0f96fae2a21d2b628aa6cbeaaefc28449691332c0a6f3fbedf01741476c2f3e10367e5d5d8158295f222998e8f35e66bb65dc1b002b58cb52921056138ba542a712d980b81cbdd48884f3e0be957a5e477f7692b40d94e5e18c314d2ba37c75a468dc7e8f84c2f443437d5f6"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="94000000310002002bbd7000fbdbdf250000000038000100100014000b0001006d697272656400000c001d0008000300200000000c00040008000300000000000c00200008000300090000002c000100100002000b00010073616d706c65000008000100696665000c001b00080003009a5f00001c0001000c00180008000300810000000c000f00080001006966650000000000af2a8b2664d7a597c56facac170284067b689eb40d670c603a2447106bf71b4ae08de8ea8815f14157bb6be4076ce95b8da05bff"], 0x94}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="46ef7e16c360d0d6f1a39b87be10fe38000000", @ANYRES16=r3, @ANYBLOB="000326bd7000fbdbdf256b00000008000300", @ANYRES32, @ANYBLOB="0a000600ffffffffffff000008000100020000000800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x28044000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe9fbb66ec", 0xa}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x7ff, 0xc) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000000)=""/42) [ 1058.091334][T26678] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1058.104897][T26677] FAT-fs (loop1): bogus number of reserved sectors [ 1058.119141][T26677] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:27 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) unshare(0x8000000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000080)='syz1\x00') shutdown(r2, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2) [ 1058.156361][T26676] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1058.195244][T26677] FAT-fs (loop1): bogus number of reserved sectors [ 1058.212616][T26677] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x41e, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1058.269725][T26693] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1058.300282][T26690] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:27 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x8, 0x4b56, 0x200, 0x7, 0x101}) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:22:27 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000000)={0x6012, "12091faa3bfb7d2752f02ce115ea7f930feaed55e3cad9dd9ebda4903078f972", 0x2, 0x6, 0x8, 0x0, 0x2}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r2, 0x40045436, 0x2) 00:22:27 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x7) r2 = socket(0xa, 0x2, 0x0) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000140)={0x74, "49b0f446bc8f059a0f456d74683f1fbb8b0c43b6e1e2030270eef89bccd2392a092b1b79d7f4362759fc40010978114f957d2541ca129976455476cd986286af94592de5e6b9f26074685a0f0f79799f8a7ca0d1e544f3d47554046880c2412a7decda427eaa0ae0684513373b2a35dd1a85c827577e09bdce53b41a3ea3baff"}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f00000000c0)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x4b41, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x8) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x4b41, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000200)) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000100)) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) [ 1058.360622][T26714] FAT-fs (loop1): bogus number of reserved sectors 00:22:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x8100}, 0x0) [ 1058.406343][T26714] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1058.520343][T26731] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1058.524814][T26714] FAT-fs (loop1): bogus number of reserved sectors [ 1058.536414][T26714] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1058.643867][T26738] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:22:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x4b41, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) r3 = dup(r0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x2) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r4, 0x540b, 0x1) 00:22:30 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000000)=r3) splice(r1, 0x0, r2, 0x0, 0x401000010000, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) 00:22:30 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2b0400000049990000000100000000000000014100000010001700100000000000006574683a"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x10, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x810) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:22:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x41f, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x8847}, 0x0) [ 1061.122225][T26762] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:30 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:22:30 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) [ 1061.180198][T26770] FAT-fs (loop1): bogus number of reserved sectors [ 1061.186773][T26770] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:30 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x200000000000041) 00:22:30 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) dup2(r1, r2) [ 1061.254577][T26770] FAT-fs (loop1): bogus number of reserved sectors [ 1061.264242][T26770] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1061.293735][T26772] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:30 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = accept$inet(r1, &(0x7f0000000280), &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x400, @remote, 0x401}, @in={0x2, 0x4e23, @empty}], 0x2c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x4b41, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000000)={0x5, 0x1f, 0x2}) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:22:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x420, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:32 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000000)={@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6f, 0x100, 0x7, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 00:22:32 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x5, 0x0}, 0x8) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x7, 0x10}, 0xc) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r4, 0x4b41, 0x0) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) nanosleep(&(0x7f00000000c0)={r2, r3+10000000}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x4001) 00:22:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:22:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x8848}, 0x0) 00:22:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:22:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x500, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1063.284392][T26830] FAT-fs (loop1): bogus number of reserved sectors [ 1063.284406][T26828] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1063.293231][T26830] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:32 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$FIOCLEX(r1, 0x5451) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r4, 0x42b, 0x0, 0x0, {{}, {}, {0x10, 0x17, {0x0, 0x0, @l2={'eth'}}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x3, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x11) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:22:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) r3 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x204000, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x16880, 0x0) ioctl$TCSETX(r3, 0x5433, &(0x7f0000000040)={0x40, 0x7, [0x365, 0x0, 0xb, 0x9, 0x9], 0x6}) [ 1063.371159][T26830] FAT-fs (loop1): bogus number of reserved sectors [ 1063.381012][T26830] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x600, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1063.496494][T26838] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:22:32 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) [ 1063.540828][T26863] FAT-fs (loop1): bogus number of reserved sectors [ 1063.550325][T26863] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:32 executing program 4: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x9, 0x9, 0x2, 0x2}, 0x8) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r1, 0x40045436, 0x14) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000080)=""/40, 0x28) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000040)) 00:22:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x34000}, 0x0) [ 1063.606818][T26863] FAT-fs (loop1): bogus number of reserved sectors [ 1063.606825][T26863] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1063.724254][T26883] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1063.804798][T26894] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:33 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xda987) 00:22:33 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x4b41, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000240)={0x2, 0x0, 0x10, 0x1c, 0x143, &(0x7f0000000540)="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"}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x1a, 0x4) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r5, @ANYRES16=r4, @ANYBLOB="0101000000000000000001000000440001000c00070000000000960000000c0006006c626c63720000000800b2030a69700008000800000000000800090000000000080001000a000000080005"], 0x58}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000280)={0x3, @pix={0x0, 0x2, 0x4f565559, 0x8, 0x1, 0x20, 0x7, 0x7ff, 0x0, 0x8, 0x1, 0x2}}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x4, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 00:22:33 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1) close(r4) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE(r8, 0x80084504, &(0x7f00000001c0)=""/177) close(r6) splice(r5, 0x0, r6, 0x0, 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x640) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:22:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x400300}, 0x0) 00:22:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x604, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:35 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@md5={0x1, "68083f0a7df4517f8578117243d4dd1a"}, 0x11, 0x2) 00:22:35 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r4, 0xc1}, 0x8) 00:22:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:22:35 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) openat2(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe4082, 0x181, 0xc}, 0x18) 00:22:35 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) ioctl$CHAR_RAW_FRASET(r5, 0x1264, &(0x7f0000000140)=0x10000) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r8) splice(r7, 0x0, r8, 0x0, 0x10000, 0x0) r9 = openat2(r8, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x4}, 0x18) accept$phonet_pipe(r9, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000040)={0xa, 0x4, 0x9}) 00:22:35 executing program 2: ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="0000360000003600d944"], 0x0}, 0x0) r1 = socket(0x18, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000880)=0x4, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000700)={r4, 0x2}, &(0x7f0000000740)=0x8) r5 = shmget$private(0x0, 0x4000, 0x70, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000000)=""/196) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000000780)=""/219) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x40, 0x16, 0xf7, {0xf7, 0x2c, "b859e66ecdf79a7766da520c636d47334a000b3a0c8f2d6d360e8c6dc3a34e54c9f0f1676fd155bb0241cc3caeae32e6d088067b493d28a375d6e47c60bb4e0878def26e49fb5132b434730383b6bac18c6bfa1c3c6d3a5059bc74edd0c92408a546a7aafa89900508c4b9ba3fa7841a8b466d944564fca7039886ddd993db6a2db5f4619080264220b67f8254f8c25b7e026f6bf11bb20e9fce6b9035a7fbf5ab44ac1e16fc67c12e2623a68f719e6889a0deaaa9c4248795cef939e7b4522722aaa54a5048d852e6a286faa606936ba0f3e0e98d97a5ca0c7957c49c424b0b0f20d9fac590ead433ddfe863dc52bbbeb1fa468a7"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x20, 0x5, 0xc3, "6b92ee340d5f8ba1519e810b7621a5b42ea4c11c2fc960513c68abe5a63a539ab4fc3c445c737df443a3ed5df56660015f8eb0108e60c796efc473291f3950a15f33afab0915365f874c39a43bd52222ee2d94fc4c78b6072cd41ebe1f811baff737a07da02024a6a4417de7af9f25f1458235832323e2eac53baa2f5c557e6cc0ea138d3838ef7e01716d605df569d0c053d6e37ea149fb5a78d70d7de65ee339566a7fd9e4c724766ed3779b5232a84e211edbd5dede9d95de540c08c20ab59d7cef"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x5, 0xfffa, 0x1f, 0x7, 0x1, 0x4, 0xa6f, 0x8, 0xfe01, 0x8001, 0x7408, 0x3}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x401}, &(0x7f00000004c0)={0x20, 0x83, 0x2, 0x4}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000540)={0x20, 0x89, 0x2}}) clone(0x42240100, &(0x7f0000000000)="d6d6c405216514dd4b", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="cd7a83ccec639de6d453c2efb3b2f77c2ba75afaa665256a2da38ff1732124c0b9c5b9db88545a2f9fb8535d4962523b01a22c4bef61fc8ee832bc5b10ef83e0c320da33fbd3fc5847b3c91397652780bae8eece0f6c76e57858ec0e600b4f81a91710ccb3ec68d3074181de6cc34f58f8f37185ca2d7e") lsetxattr$trusted_overlay_nlink(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.nlink\x00', &(0x7f0000000680)={'L-', 0xfffffffffffffff7}, 0x16, 0x2) [ 1066.399057][T26937] FAT-fs (loop1): bogus number of reserved sectors [ 1066.407471][T26937] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1066.409064][T26938] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:35 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x48000, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x38) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x0, 0x3}) r1 = syz_open_dev$audion(&(0x7f0000002500)='/dev/audio#\x00', 0xf1b1, 0x440000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000002540)={r4, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) [ 1066.459446][T26937] FAT-fs (loop1): bogus number of reserved sectors [ 1066.478688][T26937] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x700, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:35 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) recvfrom$l2tp(r0, &(0x7f00000002c0)=""/19, 0x13, 0x40000000, &(0x7f0000000300)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r1, 0x40045436, 0x2) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0}, &(0x7f0000cab000)=0xa) r5 = syz_open_procfs(r4, &(0x7f0000000240)='net/dev_mcast\x00') write$FUSE_GETXATTR(r5, &(0x7f0000000280)={0x18, 0x0, 0x8, {0xa4}}, 0x18) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1828020}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="b00000000514040025bd7000ffdbdf2508000100010000000800030004000000080001000200000008000300040000000800010001000000080003000400000008000100010000000800030001000000080001000100000008000300030000000800010000000000080003000300000008000100010000000800030004000000080001000000000008000300040000000800010001000000080003000400000000000800030001000000000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4084}, 0x41) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x600800, 0x0) setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, &(0x7f0000000380)="78477ac5d008c5d532f4933a3b1d43213169c698539a3d822f902a403d32b055f608228d8efeb0c25986d4787738b9009b772dcc88cd8d5d921862419b2b7db835380f5141040d021f987cc1834a1cfa3f4bf1d73201a81407cbfff8541b5215cf72e4b7f885519dbe85e46f509703aa2f9ae9080135155032d29859e71acc7d183fbecea4e72436e4b30f9a374bdc7e09", 0x91) timer_delete(r2) 00:22:35 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000000)=')/)%\x00', &(0x7f0000000040)="4408ebd8b99162141b70e795db9b99c1f5de1a390068a200950050ff8a95", 0x1e) [ 1066.608922][T26949] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1066.613322][T26970] FAT-fs (loop1): bogus number of reserved sectors [ 1066.624888][T26970] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x1000000}, 0x0) 00:22:35 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) uselib(&(0x7f0000000000)='./file0\x00') ioctl$TIOCSIG(r0, 0x40045436, 0x14) [ 1066.699459][T26970] FAT-fs (loop1): bogus number of reserved sectors [ 1066.706182][T26970] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1066.733730][T26992] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:35 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000100)={r7, 0x5b, "76b972e4bc5fd3c2f3380abf76557855d8696ad5651ff9080b212e520c36028bf0200ad9adde6837062652a63eb74a7ce15b84efa5a14d7d3de0ff3516652534e8d0a3c4b3fb0ebb7786f5895e28a0aa1ddc31914634113cd84af7"}, &(0x7f00000001c0)=0x63) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r3, 0x8004510a, &(0x7f00000000c0)) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x149541, 0x0) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000080)={0x7, 0x0, 0x7ff}) 00:22:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x900, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1066.768675][ T5087] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1066.852222][T27000] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1066.872084][T27010] FAT-fs (loop1): bogus number of reserved sectors [ 1066.884193][T27010] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1066.962580][T27010] FAT-fs (loop1): bogus number of reserved sectors [ 1066.969503][T27010] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1067.050208][ T5087] usb 3-1: device descriptor read/64, error 18 [ 1067.478614][ T5087] usb 3-1: device descriptor read/64, error 18 [ 1067.758611][ T5087] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1068.028607][ T5087] usb 3-1: device descriptor read/64, error 18 [ 1068.478534][ T5087] usb 3-1: device descriptor read/64, error 18 [ 1068.598533][ T5087] usb usb3-port1: attempt power cycle [ 1069.308419][ T5087] usb 3-1: new high-speed USB device number 15 using dummy_hcd 00:22:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:22:38 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 00:22:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x2000000}, 0x0) 00:22:38 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x26) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x32000, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) fsync(r2) 00:22:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa00, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1069.398652][T27036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:38 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) sendmsg$sock(r2, &(0x7f0000001880)={&(0x7f0000000080)=@ipx={0x4, 0x6, 0x7fff, "3775ebc7fc70", 0x7}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000100)="12ccd7391fb31aaa0304656cdedf3740bec4780c6b917314c06a19e747081ceca1c206b5e0d7b2136e27979bd9636060f1a1a550c631b159868c2a700ae8bbabd76692e5fc597c1edd0fd190dbd1d84d4d61df27f25cb6a7ee0b19fa2fe1d6702637f17a58a43fbf10475788c5a3b658eb34e9219258ffeea5b508e9c30863eb2a96aa683bcfd4f1632509d29d02d6468a4a27cb7055eb4c99445573889309bb4d73e82bd71186862bac5e935e72be1a0175f8052feb1a678fa0677f233f35ef3008bb34fff2b687", 0xc8}, {&(0x7f0000000200)="85974a9b11d549bb3cc1185f211b9cf6bb4393ba0abcc48d3170b8dedb09cf80db761d821c69de7de14091bc2485ea67fe95a6c25fe1e16dbdd6c351fc994be6061c02bb156b4b4775c5039412d3b8624e19dd06f0f56278cb10e481f309edaa875d468c717689de21fec4bdad26aa691a345d3645f71bf8269840926908a1dc09f70ddc5d7834688b79dd56258b2e95bb51eec49f76c70c6b8a67020ef905f1e57bba07fe20009e3ac586dbd26a64c1be02ad6deadf017f6ba4971d53a2", 0xbe}, {&(0x7f00000002c0)="e14cb19f10562be12aa8e940a53d4cf52e6a83984dfffe1da3815d6e7430d3bae576b5d68742af269a96ab225f2abbb1f20556cdf2e4e268cdc43aa5b6ba847bb488e1f9c6643363ae2043fefda17ee3dada87ef8a2573ad48775edbf83e7a670f3e5bcbcea54fce8d814205adee7adf3ea896fe1ec72659bf7bdd2d9c9b58ac76c9775e29e85a1f4a0a2c27db7cf896a3128d255e5174a354eab86fa30c28bab1be648adcedde9a557ac1c5f5b9ee6acafab0aaf26eae8e45f258393d3d12", 0xbf}, {&(0x7f0000000380)="47b77d6d06bf22096184b73de3664675d6ef2a506d883e94875929f19a749b892e8363efd478fcfd7cc27912ec39ee98a6a9c126b67f12779949fa02009b22630e5e8c8552459c56f1a4e0cca617a89df78905a33b283ba7c6c64f76ce27c607b7d0f92d27f07a5a284c7a8e2a029cbbe6dc0d79bc07cad956bb6ab6b28155a95e4102db0575c0cdb3e05abea4488418730b8f71cc6f338212a6230774", 0x9d}, {&(0x7f0000000440)="211139b1f1e30334c3f7204eb103fb19f9a93fb7d127df13086db20c81d951fdc2987317cd5544d9e36cce031b7cecacb9a766e41c59120091a0409a028fe03f23636e198d35bbb40bd40b99c76c4d6cc8204e6a1e4e523355cb95759464874c171a887050ef200216de23a53ba7ed29fc2999eb2add837405fbd09e43ff69018b413a72c6338bd3a65b118b40b451a27923e6dcbbe45c7ef185b02399497f7b091c329f48b443d025bff3641c35f859", 0xb0}, {&(0x7f0000000500)="84abeb862ebff945bcd69d2584fa70be6e2eb40591cc52f4e5321f168ba62e970699b1587c6822516c74a6bca3ba06ddacb4828ea6acc1202c75b52fc2933e438146a90cde205515677e859436b88461bb53f7181cc3b7e370fca28669496e1137cf956460a33728f3089679b1ef80ebeedd6bbe8a3668976e", 0x79}, {&(0x7f0000000580)="a7cbb47c567f9a1a7f7f9927527fd004cda57f0c9a48cb7a55fe8e41bf7ddc6a682ead89e2c6d5ac199004128601d6aaa93796c69e38acd0943903ba1054d30c1e4b35e2afc90f6afd2fb27a7b51b27165872612f30a74e7b09ce177c934e712f726e993af151a1e444249673a46f172b62c5511c476105e1e44e73f9e8e63443025fc8be02e8da69c0a63fd06ab83d2401025738044cef4e7b3773629231c13fb7325c02cf66d498debf5438f59cea9440f0a1e6b7e96afd43fe1343da5623f634c7b2d932bc6fa27efa6c320c797193d211fc395c7e300fd820022bb7f26", 0xdf}, {&(0x7f0000000680)="be279de38e9edfe3132eb197c3a93e3a429b38284aef8dac1dc653f6a552608dfdfaa8f6a8441546a01e4aef141e3de9cd9082cb4067cd5fd958cc9a03e978d835f1d80a7c4e8dfb2296b5db638d8c7a685f7ac5c90a7011b052c38afdf0a453774e97c617c0d802eb103be9a6d0ceb6be4daf050ee94e6afdb696f73d5e2b0cee0a2f4d1c757850dd7b79591526365a950320e4d0cf2a184de32ea7945d3ad77bc03013c944b4ead95dd40316b05b4bae6cdbcf4f8fbd7b2d0839ae98adcf", 0xbf}, {&(0x7f0000000740)="9e5dc743fae284167a298c1e9e3dae9786", 0x11}, {&(0x7f0000000780)="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", 0x1000}], 0xa, &(0x7f0000001840)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}, 0x40) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:22:38 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$TIOCEXCL(r0, 0x540c) [ 1069.478444][ T5087] usb 3-1: device descriptor read/8, error -71 [ 1069.497718][T27045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x3000000}, 0x0) [ 1069.522873][T27055] FAT-fs (loop1): bogus number of reserved sectors [ 1069.539778][T27055] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:38 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') 00:22:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(r1, &(0x7f0000000000)='\x00', 0x420002, 0x5a) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'veth0\x00', 0x8000}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r3, 0x40045436, 0x2) 00:22:38 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540b, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) [ 1069.618168][T27055] FAT-fs (loop1): bogus number of reserved sectors [ 1069.628088][T27055] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:38 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x200000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000040)={0x7, "e1663c30b6939eb8ad151dc6a2574a2d25b742277931b87ae87598d388ced150dbb1d179193b435acc92afbfc803f0ebaad23bc463fa395ed6ec57109a612d2d26169d73750e1aa6bfbdb396a909100246f3ce9c5465625888ab178dee2516f00b57a8c602bf41c78b03dd314e4c5300d55a0953ff5d28b11f57f1d5570172b5dbeae81b90aa848b8cc00961938632712d05f1ff1e1bb2ef47d938a06b9641a423dffbfe0a1724e9ec717d7cc6ed1d1cbdd19034e7dace67b56257905ae24a8b80fd014298289c4d65034eabecbf7da4e538d52e6d06bf8bdc6c495692d2442b020610eb61bcf2a0ef3464c0ce45dd64ef3b0f56c5271ec193ea7a1e84c6c63a478753dce0542348afe1e90853d003e8569cb77569739ad56b9a1eb58983c7f68f0853567f9387fa808296a2219df50ccb9d76813c761f59d652f0b9e918205be723f1223034c6a25e65cff99eed470e1f3304007e34cf311ff4b48cf4dda3da561bea62a972f9de768137678d738174a0916c73fb5e21da4d44e81db6bb99dff56f4c21567b81b5bcfc0fe807cded66eac104c7a115486e387294d2539bc068bc911c149506f02facf108ceb55eaa743d1500aaf2fd41bb48db3a6159d3425313ddd96035481f91f9e134ecc62f9f043c277a36d61695192fa06483be9619c2e4ec9a1f8f693afe77151a2d2fdaf502d72c35269876193ce7b2f95e6c9b52cb"}) [ 1069.675382][T27081] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1069.708368][ T5087] usb 3-1: device descriptor read/8, error -71 [ 1069.804307][T27090] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:39 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0xe) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r4, 0x4b41, 0x0) r5 = pidfd_getfd(r3, r4, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) 00:22:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xb00, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:39 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x17) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) ptrace$cont(0x7, r1, 0x0, 0x0) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x6, 0x2, 0x40, 0xffffff80, 0x9, 0x7fff, 0x200, 0x4, 0x81}, 0x0) 00:22:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x35) 00:22:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:22:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x4000000}, 0x0) 00:22:39 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r4, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) [ 1070.603991][T27125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1070.643703][T27127] FAT-fs (loop1): bogus number of reserved sectors 00:22:39 executing program 2: newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(r2, &(0x7f0000000140)='$\'&\x00', 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) futex(&(0x7f00000001c0)=0x1, 0xc, 0x2, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240)=0x1, 0x2) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f00000000c0)) [ 1070.655806][T27127] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:39 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000000)=0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r1, 0x40045436, 0x2) 00:22:39 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) [ 1070.740352][T27131] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:39 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x7354c0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) r2 = socket(0xa, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000cab000)=0x6) getpeername$inet6(r2, &(0x7f0000000100), &(0x7f0000000140)=0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x761}, &(0x7f0000000080)=0x8) socket$phonet(0x23, 0x2, 0x1) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r4, 0x540b, 0x1) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) [ 1070.808606][T27127] FAT-fs (loop1): bogus number of reserved sectors 00:22:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x5000000}, 0x0) [ 1070.865099][T27127] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:39 executing program 0: eventfd(0x4) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:22:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc00, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, r1) 00:22:40 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x8000) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x70, 0x8, 0x9, 0x80, 0x1f, 0x0, 0xfffffffffffffffa, 0x80008, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x10100, 0xfffffffffffffffb, 0x6, 0xd, 0x80000001, 0x1, 0x8000}, r1, 0x7, r3, 0x2) close(r1) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000000)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r4, 0x540b, 0x1) [ 1071.074061][T27184] FAT-fs (loop1): bogus number of reserved sectors [ 1071.080840][T27184] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1071.125562][T27184] FAT-fs (loop1): bogus number of reserved sectors [ 1071.132366][T27184] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:22:41 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000040)='.\x00', &(0x7f0000000080)='\x00', &(0x7f00000000c0)='-\x00', &(0x7f0000000100)=')(:\xc7&-+\xe7}])@![+(\x00', &(0x7f0000000140)='%+\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='!\x00'], &(0x7f0000000400)=[&(0x7f0000000240)='.\x00', &(0x7f0000000280)='\'[\\#/-}}\x00', &(0x7f00000002c0)='\'/^$\x00', &(0x7f0000000300)='+\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='{,\xbc\x00', &(0x7f00000003c0)='%^[\x00']) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000440)={0x1, "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"}) 00:22:41 executing program 2: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000000, 0x42110, r2, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xe, 0x2000010, r2, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r6) syz_io_uring_complete(r6) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x118, &(0x7f0000000000)=0x1, 0x0, 0x4) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r7, 0x540b, 0x1) pwritev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)="511f1771a4c94f3773dd415eb6b28450398d2c8696ebd425676f948483c99411405ec8d54c0110cd7ccd439224aa737e268aeaadc6999e3e7ac644ec2238489052261cc190182f7fe559e5cfa394ce7d501f871e6200f4ac54800ae2d79d61d0fbf86fed811c25b8a5dbe7c313334f36", 0x70}, {&(0x7f00000000c0)="6268682a118ba1db1cb824581491679fc1ec358039b61a24d1098b8f0c06e35f0b14586d4c3ab669cc76f1562c1ca3158fd39154f5d20cf52af4c84c106d87a95f0f08563aa94087b1ecde06b0646fe33e38508a203071ea0eba785e90cb0bfdf44d54ddaa32c95315d95705c7c8be08becb269ab42ff2bec7249dfa3db4b8f955519aa3ab6cd3b4e0e1f640056603b41842cca13e27f6bc8c30316b281b5a891d227eb726f318f38c3f5469a5134bd601134328f36e0f1586b4e5", 0xbb}, {&(0x7f0000000180)="6a2c3c7dd43d21a6a2a0668d36a424b000ead8bf70ed9ac1a371f39ccde0f6ade7b803ec1de28701320d515c4a", 0x2d}, {&(0x7f00000001c0)="23b9c128fc492672299b1f529c2aefc72ab482695267c9ec2c5b1357a1598bc9e4e23d6f74b54fac0761f448d620aa56bc2aa5121147c2ae56d789d0b0bc3b56c648814c0afaf28a55b33567c3e3f9f3a31e99842cc564287c5951a992a6140d40119fd238af78d4e7e7fb76b0999dcb4b8e078329a3e1374ec94be1c78ca63d29be826f0aefcceec187318b1f5947a3c3145806f4fecccec4c941e84b3415f7b77c56c58781371ac2952c610def37d0386ec78afdc64fb1aeafe04c94a2941b98a873d00a3a7c51effd315e58e243bbe3265491b97964f0f60ae6684380f63cf1015e1c417bbafcbe770735328444ff05", 0xf1}, {&(0x7f00000002c0)="4cf6e051e1bc4489c03e3216c4585dcd3c5555654291c304e09bb8ad1eaa4fadfc22b09507ae1fe8e6ae6b4d90ff01837920e3962fbe80beca1f8016b492a8d70eb32f15f1f3842c916772d0727ebbbe41902c1b94257a1e9e2e0c5bdee5ab8240b64e7394378ad2c893dff16291a0b5aae46b4010406d84f9c823f5c8a27a07fc4a3a19af04a020cfc52b056a0c7a3c04625afb5b1fd3d770d393899d34d3dadc562983578dfd22e14c75eab852e8ea5be9d0d8c3eebe09345ca29da1178c5e1cc22a77a173810a67be53a7b376a718151ef7c19cbc6a58aa", 0xd9}], 0x5, 0x7ff, 0x6) 00:22:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, 0xfffffffffffffffd, 0x1) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r5, r4, 0xfffffffffffffffd, 0x1) keyctl$negate(0xd, r3, 0x6, r4) 00:22:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xd00, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x6000000}, 0x0) 00:22:41 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x49f5, 0x7, 0xfffffff9, 0x3ff, 0x5}, 0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1072.317184][T27220] FAT-fs (loop1): bogus number of reserved sectors [ 1072.323598][T27224] __nla_validate_parse: 2 callbacks suppressed [ 1072.323606][T27224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1072.332078][T27220] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) read$FUSE(r3, &(0x7f00000001c0), 0x1000) close(r3) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1000}) ioctl$TIOCSIG(r0, 0x40045436, 0x14) [ 1072.398021][T27220] FAT-fs (loop1): bogus number of reserved sectors [ 1072.406440][T27220] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x80800) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x5, 0x3, 0xb7, 0x6, 0x8, 0x800000, 0x7fffffff}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, r5, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8957}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe969}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008080) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) r6 = openat2(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x48201, 0x1c, 0x1}, 0x18) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f00000001c0)) 00:22:41 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) [ 1072.449202][T27229] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xe00, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:41 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000040)={0x4, 0x26, &(0x7f0000000000)="62f30bf5d60f1ae8e898ea4c6f13ece870db7e4372606434a2da173e4eb3cba2faf9c8029a87"}) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x4b41, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r3, 0x4, 0xbb49, 0x5}) sendto$l2tp6(r4, &(0x7f0000000140)="72773b5ab8a54a421a2f8feba7037a18095d82ba9e4740ce3fa781bb67fd9e5d23775b8c080eac68a7", 0x29, 0x20000001, &(0x7f00000001c0)={0xa, 0x0, 0x4, @private1, 0x3, 0x2}, 0x20) [ 1072.640893][T27268] FAT-fs (loop1): bogus number of reserved sectors [ 1072.662565][T27268] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1072.728197][T27268] FAT-fs (loop1): bogus number of reserved sectors [ 1072.734764][T27268] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:22:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) acct(&(0x7f0000000040)='./file1\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) prctl$PR_GET_SECCOMP(0x15) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) splice(r5, 0x0, r6, 0x0, 0x10000, 0x0) ioctl$KVM_SMI(r5, 0xaeb7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x113200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f00000001c0)={{0x1e}, 'port1\x00', 0x1, 0x102a, 0x9, 0x1, 0x5, 0x20002, 0x4, 0x0, 0x5, 0x19}) ioctl$TIOCSIG(r0, 0x540b, 0x9) 00:22:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x8000000}, 0x0) 00:22:44 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xb}}]}}]}, 0x3c}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r8, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x448, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x418, 0x2, [@TCA_BASIC_POLICE={0x414, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xae, 0xff, 0xbde, 0x71f7, 0x1ff, 0x4, 0xc33, 0x6, 0x25, 0x0, 0x1f, 0x20, 0x4, 0xda4, 0xffffffff, 0x1, 0x3, 0x3ff, 0x52b, 0x2, 0xfffffff9, 0xff6f, 0x4, 0xb7b, 0x0, 0x2, 0x9, 0x1, 0xffffe000, 0x400, 0x2, 0x2, 0x3ff, 0x401, 0x1, 0x3ff, 0xfff, 0x972, 0x436, 0x7e, 0x8000, 0x37c, 0x3, 0x6, 0x7a, 0x101, 0x2, 0x39, 0x4, 0x0, 0x7, 0x1, 0x40000, 0xfffffffb, 0x6, 0x200, 0x4, 0x2, 0x8, 0x6, 0x6, 0x400, 0x0, 0x0, 0x8, 0x1, 0xbf56, 0x1, 0x1ff, 0x7, 0x0, 0x2, 0x8, 0x82f, 0x8, 0x5dc1, 0x4376, 0x4, 0x3, 0x7, 0x1, 0x4, 0x5, 0x5, 0x5, 0x0, 0x1, 0x40, 0x8, 0x4, 0x3, 0x7fffffff, 0x4, 0x7, 0x80, 0x200, 0x6, 0x6, 0x1bee, 0x9, 0x2, 0x4, 0x4, 0x73, 0x101, 0x2, 0xd8a, 0x8, 0x8001, 0x7f, 0x5, 0x9, 0x2f, 0x7, 0x8000, 0x4, 0x1, 0x4, 0x2, 0x8, 0xe11, 0x9, 0x6, 0x4, 0x1, 0x1ff, 0x9, 0x6, 0x892, 0x9, 0x3, 0x9, 0x7f, 0xff, 0x401, 0x6, 0x6, 0x40400, 0x4, 0x4, 0x1ff, 0x6, 0x0, 0x9, 0x800, 0x401, 0xc00000, 0x1, 0x0, 0x80, 0x7, 0x7fffffff, 0x101, 0x5000, 0x7, 0x1f, 0x1ff, 0x7c13, 0xa00, 0xfdff, 0x401, 0x8, 0x5, 0x7, 0x1, 0x4, 0x3, 0x42, 0x7, 0xc3f, 0x3780, 0x0, 0x9, 0x8, 0xffffffc1, 0x40, 0x80000001, 0x3, 0xff, 0x4, 0x101, 0x80000000, 0x9, 0x7, 0xf3c2, 0xffffffff, 0x9, 0xfffffffb, 0x3, 0x7, 0x80, 0xffffffff, 0x6, 0x3, 0x101, 0x1, 0xfffffffc, 0x9, 0x0, 0x81, 0x8962, 0x1ff, 0x1ff, 0x9126, 0x40, 0x1, 0x8, 0x7, 0xffffffff, 0x80000001, 0x7, 0x9, 0x10001, 0x6, 0x7, 0x7, 0x6, 0x7, 0xffff, 0x1, 0x400, 0x8, 0xd15, 0x8, 0xffffffff, 0xab, 0x1bbcf67, 0xffff, 0x4, 0x1000, 0xfb5, 0x0, 0x80, 0x2, 0x1000, 0x3, 0x401, 0x3, 0xa943, 0x3f, 0x3, 0x6, 0x1, 0xc00, 0xd7e, 0x43, 0x3ff, 0xffff0000, 0xffffffe1, 0x7, 0x6, 0x100, 0xfffffe01, 0x6, 0xfffff000]}]}]}}]}, 0x448}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@private, @local, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1a0, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4044000}, 0x8880) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:22:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$KDENABIO(r1, 0x4b36) 00:22:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xf00, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1075.358909][T27290] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1075.388067][T27295] FAT-fs (loop1): bogus number of reserved sectors [ 1075.402249][T27295] FAT-fs (loop1): Can't find a valid FAT filesystem 00:22:44 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x40010, r0, 0x0) r3 = socket(0xa, 0x2, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xffffffffffffff62) fcntl$notify(r4, 0x402, 0x80000010) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f00000001c0)=0xc) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000140)) ioctl$TIOCSIG(r2, 0x40045436, 0x2) r5 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfffffffffffffff9, 0x189180) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000100)=0x6, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x9}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048084}, 0x80) [ 1075.449535][T27291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1075.479684][T27295] FAT-fs (loop1): bogus number of reserved sectors 00:22:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CHAR_RAW_SECDISCARD(r2, 0x127d, &(0x7f0000000000)=0x101) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x4b41, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) [ 1075.494624][T27295] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1075.502751][T27299] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:22:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000040)={0x2, 0x10, [0xef4b, 0xf4, 0x1, 0x2]}) 00:22:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1020, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1075.576531][T27304] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1075.645096][T27299] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1075.657350][T27319] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:22:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1100, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x9000000}, 0x0) [ 1075.799633][T27364] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1075.886185][T27373] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:47 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:22:47 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="1107b0bdc356fdbe7be204"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3002002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x4, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun\x00', 0x610000) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r2, 0x40045436, 0x2) 00:22:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x1]}, 0x8) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0xfffffffd}, 0x4) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:22:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000200)={0x39c, 0x400, 0x0, 0x5, 0x1, 0x4}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r1, 0x40045436, 0x14) r2 = socket(0xa, 0x800, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) clock_gettime(0x0, &(0x7f0000000040)) r5 = open(&(0x7f0000000240)='./file0\x00', 0x880, 0x100) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000280)={'HL\x00'}, &(0x7f00000002c0)=0x1e) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000080)={0x4, 0x7, 0x4, 0x400, 0x2, {0x77359400}, {0x1, 0xc, 0x1, 0xfc, 0x1, 0x80, "380100b5"}, 0x8001, 0x2, @planes=&(0x7f00000001c0)={0x4006, 0xf0000000, @mem_offset=0x4, 0xa5}, 0x2, 0x0, r3}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x6, 0x2, 0x4, 0x100, 0x3, {0x0, 0xea60}, {0x2, 0x2, 0x0, 0xd, 0x80, 0x80, "b7b0ac44"}, 0xfffffe01, 0x2, @userptr=0x1, 0x8, 0x0, r8}) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000000)={0x4, @dev={[], 0x18}}) 00:22:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1200, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xa000000}, 0x0) [ 1078.059039][T27395] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:47 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000cab000)=0xfffffffffffffdb8) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffffe1}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40084}, 0x4804) ioctl$TIOCSIG(r0, 0x40045436, 0x2) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000180)) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8001, 0x400000) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) 00:22:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:22:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1504, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:47 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000000)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSSOFTCAR(r2, 0x4b41, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000040)) ioctl$TIOCSIG(r1, 0x40045436, 0x2) [ 1078.158384][T27418] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f00000000c0)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4200, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0xa0040, 0x0) open_tree(r2, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:22:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xc000000}, 0x0) [ 1078.347802][T27448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1078.434245][T27461] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:50 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:22:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x7ff, 0x8) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000040)={r4, 0x26, "c422d469685dad1546212243c48b24ed219977cb77abd3e1eb0a48dab9abaa51b17cec93afd9"}, &(0x7f0000000080)=0x2e) 00:22:50 executing program 4: ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x14) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x111}}) msgsnd(r0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000080)={0x0, ""/35}, 0x2b, 0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x1, "5fd98765ec3855262c219bc7a1f201b96527cfa2e402ca7037"}, 0x21, 0x0) 00:22:50 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:22:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1604, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xf000000}, 0x0) 00:22:50 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:22:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000306010200000000000000000c000007040001000700000009e6010073797a3100000d6e76720500070000000900020073797a02000000000900020073797a32000000005680ae5487a0d2bd43a435ceb4062a4dabe5d8fcff07548d89527db3b9cdaf4405bc601e1c6dd3262e6d5b1a942066"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) membarrier(0x40, 0x0) [ 1081.131970][T27486] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:50 executing program 2: ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x1) 00:22:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1704, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1081.236540][T27505] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:50 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) splice(r3, 0x0, r1, 0x0, 0x10003, 0x8) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000000)=0x200) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000100)) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2) 00:22:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1804, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:22:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x10000000}, 0x0) 00:22:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CHAR_RAW_GETSIZE(r2, 0x1260, &(0x7f0000000000)) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r4, 0x4b41, 0x0) r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r6, 0x4b41, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r7, 0x4b41, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r8, 0x4b41, 0x0) poll(&(0x7f0000000100)=[{r3, 0x8020}, {r4, 0x40}, {r0, 0x3}, {r1, 0x40}, {r5, 0x8}, {r6, 0x4000}, {r7, 0x9000}, {r1, 0x244}, {r8, 0x1240}], 0x9, 0x101) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x6}]}, 0xc, 0x3) 00:22:53 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) timer_gettime(0x0, &(0x7f0000000000)) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vga_arbiter\x00', 0x4e0042, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x1409, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) 00:22:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1904, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:53 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(r1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x26240, 0x0) ioctl$SNDCTL_TMR_SELECT(r3, 0x40045408) r4 = syz_io_uring_complete(r1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f00000000c0)={{0x33, 0x2}, 'port1\x00', 0x20, 0x10000c, 0xff, 0x6, 0x5, 0x282, 0xd396, 0x0, 0x3, 0x8}) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/40}) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r5 = socket(0xa, 0x2, 0x0) r6 = socket(0xa, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSSOFTCAR(r7, 0x4b41, 0x0) ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000180)) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000040)=0xc) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000000)=0x8001, 0x4) 00:22:53 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x24) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) [ 1084.183788][T27558] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:53 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) [ 1084.281713][T27566] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1a04, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:53 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) 00:22:53 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x800, 0x2, 0x3], 0x3, 0x81000}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x4b41, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x2, 0x1, 0x1003ff, 0x4, 0x5, "5c38f0932ea741668084c6c9040085016a9c87"}) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x4b41, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x41) 00:22:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x3f000000}, 0x0) [ 1084.519625][T27605] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1084.643089][T27609] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:54 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:22:54 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={0x20, r3, 0x4e559e2353b8c5d5, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1dc, r3, 0x101, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x7}}}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4}, 0x24000010) 00:22:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1b04, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x40000000}, 0x0) [ 1085.447192][T27637] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1c04, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:54 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000780)=[{&(0x7f00000000c0)="3fb3dec07199381c21ae2c9087b5d63a6ee388ff3b47fd2732342712d739c83aca197758b0e822055ecd0cd2f0d3f5a6c80a29cc0473d8aba3cd9a7c5fd78bfa05045f18039b6dc8113b09b07bccc4235c99788072befd257a6ffb9c8ffef56c2f82e89cb8af9d609d99a34b530e86bd8dbb4145b0229a30b74ca26a76e3a80a9def963cf713dc41aaa018796a4155c688c97df8ad01385b26c40cd809aa846c05fb4c8c2fbe17e8ef1f90bfb48fb26628e972b5f998673ac2851baceb2f62fb483955612f5e3cb34be59a631e29eaad77b2a3dbaa18c76f57057889167791681697bbf9", 0xe4}, {&(0x7f00000001c0)="894637a144c2e3342e6abfca5c93c9647a0f871e7063e4c0a4a44c191965bbe9780d6baba435a6e9d82d31cecd69bc7cb55e66ab0f985f5d8e5104c9507d484565f082884e728ab68db6728d8f156e8fe1aee6dc4685178112fe304288aceb085e34488d2ead9545e6350b2c80a120d21c3b0048540b2bc7260464d7c6d6a04e3cad48009205cbc78e6b58a6e726e768afa2322aad58009978c5af3472610933302b8cf2640879fde1c08bcd2379134c8e18df8e51b7d8dda4dd67cbf5444ff88fe9d1b08244a224e3e67103da3d17382da014c725be21c4e841538e174643269a1bc91d2a9b5508061709", 0xeb}, {&(0x7f0000000040)="113f3a77c2f16285230451f1201bf0026dd4253c49087ac6", 0x18}, {&(0x7f00000002c0)="9c7548f63092d64724d8ad49fe76ba8bce7dabb90de149edbc383f7ec832bc174a2310313765b94625148950b78cc18669fa23d553df3b239540d575a8cc26b6f5bbf96c1c80b570dade9b3a69a081cb2a6e58d9794e4c34330c0a5ef648975e03a1bf3118385ff1d47ef5d0c5bd7a849914cc9e1ad93df3cb6791d009e265360a8c63130dd3c78171d45ad8cbcd0691a8e2b056cf48ecc67caf041a814ea76183ee7c39e53ab4d6fdc609523b947402e620a4d1bfe6dc5dca2190091d7cfb3a3d56e73db3417572fee46e3f813a0e5466cf0ebc89db77d6c7435f1b3345de52a482983f39e1", 0xe6}, {&(0x7f00000003c0)="be34940d4360a5f6ad469599f553e9db903b5ba3dbea8c1a6e18c9f23ac9faea492211244b4e58e2e80278b4487bc666b49861d8b0dde2744132a452741c0b72d7e42aae2a2d05519f843f8f7319052cc077a77aa23938380cd6ceed1b4f92290dcaecec39353c4eb0b455000809fba77c225d1d9eceeb8bf5caeca2dec85bbb527d6e43b7ec3cab1cbb25ec01b16c5d80222b76ae96a7b667e1355a968f9b5a7777292f6670b73ad3dde15b5238b703f922cc62825bbc043672c6c55f299bad59f58a320260a591c5772824ed99e81e8bf5b6e8817aaa0e13a045f29103185d13769b34e4a2ff", 0xe7}, {&(0x7f00000004c0)="bedd027e22bbff76730b48c97aac0db634a3f28a1a08f1f1b71bccbd", 0x1c}, {&(0x7f0000000500)="f4fa486c119f6bda223d0e0b252130c4d1bfa9e5846cc869e1f333817fc7f3e6635d18eacab2cc9acc66b4492f35cae5c23f90ed761bdb2eda57829d981e35035979e8790f37d590028080b630440eef269d51ceae90c71d22fdcb7ff32b5954fdd93cc2408cdc318890ce4020d1b296a6e5e8d74f2ed454c521d4d72a9d6936afd7cdebcc8493fad145a000cf365fbb4df28aa647d681e6d1dab83834ffa2d93c351596ba24db2fec1ff6561d66723340fa6110c213959e348c6de44e862a5d0fec1412935da8b8b8ecd3ca60634751f68f6183df6e6714", 0xd8}, {&(0x7f0000000680)="b1ba1f2f85cf80efe3807e9a1bad8c02282991a583eff715d7424111da715c5d63867c90b807c90d0c7205c22d41927d12da34fc430f66742c5ed1830e0c41d59590a586424e8e5972ff6f2ebbbd1ddb23179f8d5dc8963ada4da0c29d9504d8a24c1b08c33d5e3b490d9c60ef3ca0ce42925b5b57f7f5092510c3e05c27f15485bf92a5b789210378c6d8b50b0e99721df01305bc2bd6fe43addc1d9802bab40f5b2e639eb5e36cb69ed1b1ba9fdf9bdb014ce9f73e5c78257f6fcd0520d6e3fbdc66a3ab7396f88e4b7cf2706d0c79a82a506528e332a61bd9", 0xda}], 0x8, 0x9) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000600)=0x1) close(r2) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, 0x1410, 0x800, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4c090) splice(r1, 0x0, r2, 0x0, 0x10000, 0x2) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x0, 0x1, 0x3f}) ioctl$TIOCSIG(r0, 0x40045436, 0x2) [ 1085.611197][T27645] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1d04, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:54 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/112, &(0x7f0000000080)=0x70) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r1, 0x40045436, 0x2) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x440}, 0x1, 0x0, 0x0, 0x4000021}, 0x48000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x4b41, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f00000000c0)) 00:22:54 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000040)={r8}) mq_unlink(&(0x7f0000000100)='/dev/dri/card#\x00') ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)={r8}) 00:22:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x60000000}, 0x0) 00:22:54 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) socketpair(0x10, 0x5, 0xfff, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x3c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8a5e7b40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040484}, 0x40) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000001c0)={0x7, 0x0, [{0x5, 0x1, 0x0, 0x0, @irqchip={0x0, 0xfffffffc}}, {0x3ff, 0x4, 0x0, 0x0, @sint={0x80000001, 0x401}}, {0xd32, 0x1, 0x0, 0x0, @adapter={0x2400000, 0x7, 0x9e, 0x3, 0x2}}, {0x9, 0x3, 0x0, 0x0, @irqchip={0x9, 0x7ff}}, {0x0, 0x3, 0x0, 0x0, @irqchip={0x52, 0x800000}}, {0x116a, 0x51fa5fa9513a718, 0x0, 0x0, @msi={0x800, 0x101, 0xff000000, 0xba45}}, {0x8000, 0x2, 0x0, 0x0, @adapter={0x10001, 0x6, 0xc2, 0x4, 0x1}}]}) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$SNDCTL_TMR_SELECT(r2, 0x40045408) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000040)='ipvlan1\x00') 00:22:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1e04, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1085.875787][T27687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1086.023214][T27690] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:22:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:22:57 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:22:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x65580000}, 0x0) 00:22:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1f04, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000000c0)={r3, &(0x7f0000000040)=""/110}) ioctl$TIOCSIG(r0, 0x540b, 0x1) r4 = fsmount(0xffffffffffffffff, 0x0, 0xb) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x70, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x3, 0x5, 0x1718, 0xc47, 0x8]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7fff}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x8001, 0x50201) 00:22:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x5) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000080)={0x1, "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"}) 00:22:57 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0xffffffffffffffff, r4) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0xc8000, &(0x7f0000000200)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r2}}, {@access_user='access=user'}], [{@fsname={'fsname', 0x3d, '['}}, {@uid_eq={'uid', 0x3d, r4}}, {@subj_role={'subj_role', 0x3d, '[#&]*\x0e},-'}}, {@subj_role={'subj_role', 0x3d, '.+{@@/-*:+-'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}) [ 1088.450051][T27728] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:22:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) r1 = socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xffffff65) r4 = socket$isdn(0x22, 0x3, 0x11) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r5, 0x4b41, 0x0) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x1, 0x0, 0x1000, 0x2, 0xe543, 0x5}) dup2(r1, r4) 00:22:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:22:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x15) 00:22:57 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x103080, 0x2) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x6ea, @ipv4={[], [], @local}, 0x1}}, 0x9, 0xd1}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000180)={r4, 0x49, "e4254a39026875d96cb5b08d60d010a114c3072c8d1c9d2c9ed88f28dcd099c59f30f485ce67116a1e52b0d506bb4c80f6ab60fc10d2ced312f492f8987c2dce9133e224e45a573589"}, &(0x7f0000000200)=0x51) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x1, 0x220e01) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x5) [ 1088.633281][T27735] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:23:00 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x1c) 00:23:00 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) 00:23:00 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = semget(0x2, 0x4, 0x0) semctl$SEM_INFO(r1, 0x1, 0x13, &(0x7f0000000000)=""/175) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:23:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x81000000}, 0x0) 00:23:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2004, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:00 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) ioctl$TIOCSIG(r0, 0x540b, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x58400, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x4b41, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000000)) [ 1091.513911][T27792] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:00 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x10) r2 = socket(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xb}}]}}]}, 0x3c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESHEX], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000080000040a00010062617369630000000c0002000800010000000b00"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x3, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x10000000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000040), 0x8) 00:23:00 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) prctl$PR_GET_SECCOMP(0x15) ustat(0x91ea, &(0x7f0000000000)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101600, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x10000, 0x20, 0xc706, 0x1f], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, &(0x7f0000000180)) r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r6 = accept4$x25(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0xc0800) dup3(r5, r6, 0x80000) 00:23:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xd, 0xfff9, 0x8000, 0x3, 0x6, 0x6, "1a770a50be87b56d9b20fa5ae3"}}, 0x125) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x8}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/53) ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x1) 00:23:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2010, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1091.683361][T27808] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1091.729640][T27809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:00 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x70, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/196) shmctl$SHM_UNLOCK(r0, 0xc) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000000)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r4, 0x2, {0x1, 0x0, 0x3}, 0xff}, 0x18) ioctl$TIOCSIG(r1, 0x540b, 0x1) [ 1091.772955][T27820] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:23:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x88470000}, 0x0) 00:23:03 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) r2 = socket(0xa, 0x4, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r4, 0x42b, 0x0, 0x0, {{}, {}, {0x10, 0x17, {0x0, 0x0, @l2={'eth'}}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) ioctl$TIOCSIG(r0, 0x40045436, 0x2b) 00:23:03 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0xfffffffffffffffe) 00:23:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2500, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:23:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x4b41, 0x0) r3 = dup2(r1, r2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={r6, 0x9, 0xe30, 0x1, 0x7, 0x7fffffff}, &(0x7f0000000040)=0x14) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:23:03 executing program 4: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) sendmsg$AUDIT_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x100, 0x70bd2c, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendto$rose(r2, &(0x7f00000001c0)="4d306442e605f368e5400a1770edd10a8961fa163fac298bb2be441259e930cb307e6c3ea0748414a38b1720f286a73dd8eac1b15f30d4b106d58fd273e2c58451b0eef3955c1853c7081b6e04665e195a456ea46198039bbaf2c92053aa5b2308648fab3d1442789049c6ed9d9d6bdca5c96f802a75c412d8a3e673b25b891d0ebef387", 0x84, 0x4004040, &(0x7f0000000280)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='memory.events\x00', 0x0, 0x0) ioctl$CHAR_RAW_SECDISCARD(r5, 0x127d, &(0x7f0000000300)=0x8) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x40045436, 0x14) [ 1094.587361][T27869] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:03 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000040)=""/245, &(0x7f0000000140)=0xf5) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000180)=""/241) r2 = socket$nl_crypto(0x10, 0x3, 0x15) r3 = fcntl$getown(r0, 0x9) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0xffffffffffffffff, r5) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0/file0\x00', 0x0, r7) chown(&(0x7f0000000100)='./file0/file0\x00', 0x0, r7) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={r3, r5, r7}, 0xc) ioctl$TIOCSIG(r1, 0x540b, 0x1) 00:23:03 executing program 0: syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x6, 0x8240) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) accept(r1, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x22200, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000100)={0x2, 0x0, 0x5, 0xd37f, 0x13, "6280fa7fad5b0137"}) 00:23:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x26cd, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1094.732926][T27880] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r1, 0x4147, 0x0) 00:23:03 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2c) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x41}}, @in={0x2, 0x4e22, @loopback}, @qipcrtr={0x2a, 0x1, 0x7ffe}, 0x7, 0x0, 0x0, 0x0, 0xc7ec, 0x0, 0x7, 0x35c0000000000000, 0x49}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x4b41, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x3945) 00:23:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x88480000}, 0x0) 00:23:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x26d2, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000040)={0x1, 0x6}) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000000)) 00:23:04 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x80100) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xe2001, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) [ 1094.935099][T27927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1095.011832][T27941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:23:06 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_void(r4, 0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x208, 0xd08b, 0xfff, r5}, 0x10) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$FBIOGET_CON2FBMAP(r7, 0x460f, &(0x7f00000000c0)={0x3a, 0x1}) 00:23:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x88a8ffff}, 0x0) 00:23:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3602, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:06 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x48, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_vlan\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4042840}, 0x2000c011) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x4b41, 0x0) ioctl$TIOCSIG(r3, 0x540b, 0x1e) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r4) r5 = syz_io_uring_complete(r4) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0x100, 0x70bd2d, 0x2, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x24000040) 00:23:06 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@can={{0x4, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, "a89a75bfab121bc7"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x504000) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:23:06 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000000)=0x4f846e72) ioctl$TIOCSIG(r0, 0x40045436, 0x14) [ 1097.642342][T27978] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:06 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000080)) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:23:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:23:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3702, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:06 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="1107b0bdc356fdbe7be204"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r1, 0x40045436, 0x1000040014) socket$pppoe(0x18, 0x1, 0x0) 00:23:06 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000000)={0x1, 0x0, {0xfffffe01, 0x92f0, 0x2011, 0x3, 0xc, 0x1, 0x2, 0x4}}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r2, 0x40045436, 0x2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000100)=0x1) [ 1097.811160][T27986] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:23:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5, @fixed={[], 0x11}, 0x5, 0x2}, 0xe) 00:23:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @rand_addr=0x64010102}}}, 0x88) 00:23:09 executing program 0: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf={0x13, &(0x7f0000000040)="d74c58259b60045d3304cf26211feec6c19065"}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x43}, 0x4}}, 0x10) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r1, 0x40045436, 0x2) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) 00:23:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x9effffff}, 0x0) 00:23:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3d01, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1100.731912][T28045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:09 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$proc_mixer(r2, &(0x7f0000000000)=""/89, 0x59) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:23:09 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x15) 00:23:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3f00, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:09 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x1ff, 0x81, 0x8, 0x3}, {0x81, 0xd, 0x5, 0x3}, {0x2, 0x7, 0x81, 0x6e9f}, {0x800, 0x57, 0x7f, 0x800}]}) socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2) [ 1100.889979][T28053] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:10 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000000)={0x6, "c8ca40a373ac49e0a06afbdfe7007b9bf8e413464e1a099fb3a38838af662c04", 0x2, 0x1, 0x4, 0x0, 0x4000400, 0x2}) 00:23:10 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:23:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xb1c5a3bb}, 0x0) 00:23:10 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80000, 0x101800) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:23:10 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet6_buf(r1, 0x29, 0x2a, &(0x7f0000000180)=""/56, &(0x7f00000001c0)=0x38) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r3, r2, 0xfffffffffffffffd, 0x1) r4 = request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='(+){}-{/^\\@${.\x00', r2) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r4) 00:23:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:23:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000)=0x887, 0x4) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:23:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) readahead(0xffffffffffffffff, 0xb6f, 0x6) [ 1101.880024][T28116] FAT-fs (loop1): bogus number of reserved sectors [ 1101.885894][T28119] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1101.894259][T28116] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:10 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{0x40, 0x40}, 'port0\x00', 0x9d, 0x400, 0x6, 0x2, 0x4, 0x8, 0x1, 0x0, 0x1, 0x5}) 00:23:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x6edd, 0x0, &(0x7f0000000000)=[r1]}, 0x1) [ 1101.973407][T28116] FAT-fs (loop1): bogus number of reserved sectors [ 1101.982192][T28116] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:11 executing program 2: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={[], 0x3}, 0x0, 'veth1_to_team\x00'}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r1, 0x540b, 0x1) [ 1102.059164][T28127] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4800, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:11 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x6) 00:23:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xbba3c5b1}, 0x0) 00:23:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@sha1={0x1, "9f2a14a74ecfc7fe96ca52cd3692b8fdb6458781"}, 0x15, 0x3) 00:23:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400083}, 0xc, &(0x7f0000000100)={&(0x7f0000011840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0xd4, 0x16, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}]}]}, @NFT_MSG_DELSET={0x70, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1de5ec3bbb3d6b08, 0x0, 0x5}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa, 0x1, 'limit\x00'}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3}}, @NFT_MSG_NEWSETELEM={0x97b4, 0xc, 0xa, 0x101, 0x0, 0x0, {0xd, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x978c, 0x3, 0x0, 0x1, [{0x334, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x324, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x26, 0x1, "61c0125b4314b6e9d0fe57a7e4c84830eb2f58d52cfd37fcce974e23a5c7f2867255"}, @NFTA_DATA_VALUE={0x8, 0x1, "5c78be4d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xaf, 0x1, "13a5fce4a50052b1df421f227676228edd95ecb8a9b6a37729d4cc67bc5636519a078595916eed8785b0ff5e358a2c67b1e9599393169c8a0f3a897c82f21290173bf83890b78d2fa587756fc743c7a1d9ef77d3e4503a524c135a96b4337abd5c7fd3e7bc0498288f93ac0c773b7ec85e897344b2a304f4727f1a0c6264e41c4dff912a8859e532cbec3cbff77f9fbac26d1eacc439fa41d5780a319412beecb47ecb99e053f694573df8"}, @NFTA_DATA_VALUE={0x69, 0x1, "3a79be00d52cebf5aaa29697c842efb8d4eb6f4d894c89f29f0664aaba4e91b4c78aab46fe54cf1c6c61be93e8204ab438101f8b0d80bad15bf694245c673781b40b2abda7cea4ef874d7f7a478437b39558a0169418bf9f7bf3d61365535f98f29cc44b74"}, @NFTA_DATA_VALUE={0xb3, 0x1, "c7e21231fc6f295468523d8a8d192f246bf8a464a58a9247d0677661b2dbb2f95a9dda048407e763060fc698d435a143a69d69835a94399214e0b5a7985cf4ebca84fe49f5ba09968458f6a219d2f9085c25b9e5a02e521ddd9a95d268dfeab4af95cce0ef4056bc1cf0e6fef9e2b53d6f4c712cf1d358b74a28d4be06011ae495553177f0a1220fb1328a06843fb4d407cbbfd39bf382824140c542d4d1894d08a77b31aaf0b02c40a066500734d1"}, @NFTA_DATA_VALUE={0xe6, 0x1, "e9d6c65de63cd2e57d64e8d43806244ce7c78c66dbd86891a11c03642b661de0268b3650098b52bbfff977c982079ef06c4fa8553dc92f6402e29094303155350b3c3d685fc504eef7511fd44a6222f6e616428b3efbc8ff6ad3c496b1e76faabbbd2eaaae0b823bbbc30f14c25650f773a792d2eb471f1f42ef6166981e8019e438a49f5a5d4b14520bd6bb47487c285779df93679294eab87f6b61ed13dcdee173b24c27cf1f77e539b65f927753ed25c3e48bca221b83683d1f3fdcfc7dc949d3e9d3b97af638825e373082dd8868e90ce96fd7577a467b70e2275df70b676774"}, @NFTA_DATA_VALUE={0x1e, 0x1, "ded6680882891b526edb3f87d96954d680de00898770d9bb1d35"}]}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x2044, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x1014, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "29b844677b5dfdc92ccc57b3f733633b3fb9ef119e292d493ec496fb5102c4bb0a95e28ba7d996dc683fb32f94ce677b2f277305173f4c2bb546a54682556c2cb1d1b9c925ce23b9272e1e402773f3565562b3d8042fee10c30f477c79d05f3d1aff2d677bf430a20b05570c34fd8051caade0c756042a0ddf99b22d130605ca64513904b79e58530c5cb68bbbee3057561c29aebf0aaddab34aa2e135a08cbd6fef27800f5b9232259ea9c4f801dc6d9058dbdb366e9a1816ea08dd800d464e049a1f3873df6dbe10778ce7f7c013c26473bd7c3e66d5d834e32e573e47c44ab62713af150b33d89dea4f060fe569f3495cbf470d9bb33ba10469d9a7dd4cdda6607e75b23f5121369fad4995cc33b3d7b74645a0887dea0a9c30f0b9bea8913f02e1499b177b7a0a3be3dc2f57c1279aa2d93cc112c7a57f768f21e2f14a76e317f579e3769afb86348e14837ef469287f593498591162c8675855893b1f558b1207872e35cd1a7edcf2a71318930e9e4e81d3b114bd3121c9745be0a55facc473ee2a9feaf95aaed09e342d0bd9ff61e7abd60d263dfcb0d89ba9fd2b62b9c0e10a7e1bba236c390fe2532c1d47a74ad15462300615a67ef3896a47bc825f4b2d92d5f319d77323347a0f5a6c80d4bff437abda13985a5bc35a0d05acb2d0b6fbc08c3c77af103faf502e41224e668962e5c9157899667c0391ed2f23c006d825afbb48a2e3b6ee9f4405170baabcfa40b715db6a19fc987c0ca9edaca4153808da2e0ebfefcb4311a303f253dcf1990287b904b60f8a4e16352b140e6d26c75b4705a4360e09fd23924d71aa3e6f399c7a06491318c127427672b7e00f1e226ce6d49295233d2f1f1b5088ec775e0f7a24a5b05b7f0cdf14d843a9d7d49da380d928ad47f12671d5f9092a48218fd43878056aeb16afa1541621899a388bd11ab0d1a530df652ace19c21cf082b71b74ba0fae09cbe77b808b5c248c5b61a67839d05761a820abd500be68c80e4c0d2cf5e8da1d26b70dd5618e166036e525f9f8ef4a3266a4b7124e16fb360309eddfa98097ea52625ae19085cecedfbd56b1e2f425a8abbf0425c789ef0b91505fb401e529e3baf9a1f77cc4135e59ae561a792af4492829742463046a016f0988f5841994e39824ae7269e14ab79d9219adb29cc4378ead759d1d45117d02b68287a254a15871af0d67fd3a2abd88e5cfb7112c459b354e60d58c0c3feb94e7d568b1875d0f802dda5f0fd40e307eb661f0c3bfbd2cd68948c2f1079b6bff6f407dbc9b3b75ed719c00f6dbfa74be04a6cab25b7c04e79ce42f699aa07e04610a2a4f492ab692a7cd8323a2fd3b450dca22fce8457c2349c46d279f74b79afaaf284beae41592caea2031e063c775d2bffb5694d3d378d588ab098e99f05f98ccd1cf0515872e177d52bb4b425defc4eaf85ec53abb568b723d35bda316752a8fab1413fa3a4e29b28e900f45716bdc7ef189f5ff0057dd2d1c06d631933219a38ec5533e8da484eccf3169b01dd125054982c19044f3d7d3ffa1ab04991e27f5fe77c8145e9e0ab0068b4c68d184dbdc3142ebf6840f604e516d1445d479822586cded975e98cdca6d7f79b8e400cdefb096c0474ddac33f7d630227eb2218b8e8a9c775cdb724a07eed05160891c7ca878361d14a7eeb942f4d678639e3f7a120d0fb6f94c60edf5aa2207baf9c26cef1ffe1de4ef4c1c7e8d3ac8f759a5587eec8ac44c589025e9cb1d17649543e7a8950f932d53b039fe3295b288557490b3801c080e98219299fcd9329d27b30b37da37435f5ed59e59714d83cc4150a38a4080cce05a3d10cfd99594aff771ba2c87b6b74a35bfaffb24cf8d753be780873da631225b864b38eaa1c37677858129b7d0f86a5315b963be62da0b426bf04afc91aabe2a64eb964857079e45675d8d8f29c70bf1da330788f7a58fa22e38fdd176bcfb07db157cb1680729f83d09d9fb1c136bf880df12e71e97b27ed89c273ca2ba3df718936a95faeb9c57e3bc56a856eff047a2cc1bdc3fe8218be144e6ddb24b943f98b53926978250e1eb3afb24d1697a4e227e36b66e10b1096728f80795cf15e7ccf21d7bce2dd0e2bfc454bae85d91a4ed1c450a44c3c75b895bc37248c6e1f46d80496bf24d0e68afd14bd937dc56786674892396d112d33865b02c6ce2bc89dbadd093a121482d1e02c358d4d89f24f673e349c0e11e4f92743eeb35f80076d451a3093b0c04c267e745f08ae378afa4010bd1d440c9600442ae1a19397b5bcafad5287288b8f7811b7627404d6016e198cee212986ee0ee620ececedd7bfe9d031c087d4ecc3d6a1d518d3176c278eaacd5ea24714a5b8275f63f2f04eda4375dc239822064d4df3d345345a6f97b74489d8546347d8ec73393d3299cd9d0f2a334d092cd007f39a469059d1a8c9a348ddc0a6af4c9e91443a7c9fe4752f71ad9462e51fc50cdd85232540c0aacc22bb4c85dae4cdff26e4e4ee132353913fee4fb255ba54ce3c831c3f98f6d6ed0adb0751fe455db4de2b1ee4b903118b7665c1eab3b51dae5301785be3a41c208a64a2b0b5ca88aed759cff5e2d11212f5ad04f0051358662374b094e8e535bb0a0d29438bbb35179631b6751f8897baa324dfde50461688c7b3c1cd56d788850ea247c22ac3eca09ab1b6bf6f430979d27a1626486b28fe0ab0af9b57609032b9e8827db85f28aa3bde14af7ce53d248b4139777ad9af8cfdcac2dc7378968036dab1c25038d62d0c52a29c60e03d16e670a80f48ce479e4dc44b2bdaa359ea403fa2c2c76226f2ea82785efb2882257afb13f441194ed06f2ee3eb3ed6a4fe3c63dc064c6146b395a0f9ed50e3a01b565865ac3394a94c3aec4f6a5d1228cdbd00ac13b1d8d213e28bf0f8645239d0785d6d71c923547c678edd6cfb50a7f4b35ad128ccbfc5b420e381f1b8d50298efac3c5f9392d8b3aa1ca47d7bbbec61e4bafea83c428910fbe0abd52156057c940ea4e8685ca2bf15aaee4af3e5ef1e21ecb6194b61744a0f23b5889c829f263febac81d53e45be81c7e6430df83558e111aeb335595022264e9f63fbd868fe78d318162d79ac4e28af3d1c5db37037659cfe57bc8770b0d127ac64700a2d5230e32c38ebdbc84e3ec3b517a136e1ac2f725fca38cfbc56846db13819b16242ba71ff2a97b325fd94bf9b4b75684f11d04759b63b56be07f7ce91d5dc8cb1e8731987752853ae94a768e62e48c07b575fdf31b90f7a6c96bf732982032ab037f8f04db54082e0c6ae291b49ca0d1bdd19561e142016c2e5c0a10a7d50708019a247bcb64792cba33a4408c1b162a124543b3116436192fe988f0bb7a1ce4c2b50336c54629110c693181f43cbf8440f589b60a22ec61081ea348fa84d05716683e2d76ace6810c84c877e992cb8a2298ae29c624b5ded1c1750bcc8151f0b2a06e501b4c68dc07496d7e387493194730ba117a4d162914280de255da5f56d135c447a4f9dd210376393f5033bf9903cf577a657fbd87c62fff583245aaaafb4264698a73561cec70634080899a9e41b2a3defb889bf5d61dba86f1731b28ddb5309bfd48febe3bcd2baab044e720de7c224dcd7adfe81bbe64905460e86d661c808ef79875718b95a0b9f03265d15f1779ab315186775ca48278717724c3295d82c4a602e6fe73114a48d4953f56ebd7d7e4e09178d466144333159a5527df77db9e864aaedadcceae8f968c9ca9b0a2cfc471e2c35a5f3518410849604c8bd6dc60c2ac68242770fc8a08af9f5f924c0540aa429941d31abcd78366f2f5191d6c6422ff424119839bbce37840181efe4048e3ef64f9dbc5441ac04de4ead2882af8980007422a7ed6f29184295138f00135ec6b1121d205a191b9186da1fd028a1f97b954096fe29e539901d8f0390c6d5f9cd018684f416a69704e101a75cef42531c32350e861119c5cdcba1eaf27852607b5cff9cb4e37f1e1c0f7cc53dcaef5dc7b3764dc07f9b61a67df03206d427d2274944ad9d260c43b8b5889fcf6377c54ac93d64098ae373fc7fc25d03dd31e386b6ed76df00a57a69d504dde2d704f3765dc622edca2a627a1a21a9ddd7ae73f7de16836c40136afd937a0193fb7ab287a00cfb531c6cceda91b1e1e2138cda2d40886703181a45f1fb7a0e9b6c7d0b5136f5385775b38f2a981054a5cd07dd85908722a92844727005d02dd2235158f1d0061631d4748577fd225e06c3e252b74610f60cdb7c17761db3fb9772d87d2d2ec1da69a7d9b3484a2804aab3c50345d9835dad4ee6ae4fb029ba0a76c789c05bc2fa1accf92de0357574b3fd07e7257fc3788e6436776ac339b54636f2a1fe4e6c37ff48d9825a159fb8bab47146589f30d84cb502c0bb512da4584c6ccf0889180cb4d12f15dc6299a4ca0d522f4e0a269f40b1fafba5ae0c9eb10c9c06727299a94999abaac8dbe2eb9f07b3dca175de810937d0717000f18272e5c628fb4ff7d0de78df17905aa86b792eae8fcaee15d7447ba3844027c447ba0f5eed099d27ba7ba7a56499e66a378b19ba8622df7c567c8aa70d357c1608d25fb66b87723d530c9222ad3c3aa1db59cf6a6f852775fa67b5e4f81b7cc6dfccccd00c1839888806d57c07106c17d8bbeb7c7ca7c14bf28537200f22779cbada71f5f4f869ea1b97681d1d325031189f0f05067f10f87e4f5c78fe0b2ee29df6638787e79aa16a65fd8e4fb9ffd7c8b65a95b852106b8c9219646a0835356fe15baeecdc99362e0232ee92de4b54bd6a2e463ad18f0d0d225a6833f6de09f5930d616f628418adb05a77c7c64699ff16036d1862720e4e8dc8b8c7b944a120b68f647b8f17c29e00a49877ee6033f7569ab8ee7240fc94f7eabc98cc19fa78cef0f3f95808531e6228eea0030385c724ecf2e4a3f61307ba21210f399ec34d0f8f0d31e3e9026a21a7ec21275626f3df80d3ad4a9ef5aa9320fc1f41b73b35d6d381f1109222c816d383bf8acd5ea8f258a7fe4da1a18ca1211a6d038a7bb24438f7ceb29cfaa36739c74aa833cb4188e24e7b857f8b9443dcdb8d23037e043bf067f6d686262a52c3e2f0fb2e8de961d9b53ecdf890ae46e214046d6dfb6e3a8ed7c2e714ebd5346bcdacb53139df23a65ff3c55ff7e37de9e03d4207065f3432b70796938927d91c8849696c52bcf39af487ee25fca611e7d1e18a00fce03609a46b66cfa90e96664b13dd59fd5bd527d5bd1bc0f00f53036554c81b048c44c369c0778a4db06526ff99fa65bdc485202042037fa793d05c23934e10a136d4c1f264563da05da066cbeaeb1c8a6355c26caea6c16a0ba1f1185d2218d998d9a6a9cefd416ed42373378d7ae922b46384634ce0266a6644b958c4e64e1419b75045b09b755b1d344685b3546ec206ccffbf19ae2ff2772e0f47fcc7be3b9da13e4ed6eec3d39826658a17c7c4ded7d3a560ed1d4b808ddf37bcfd6dc10d59b532e6ce7856819683c2ea25718445b75ab70a7e843306710c547af02451ec1451189a575cb07b8e4b9a06138e7420a56e393837178e11d884511a93784c09491f7a22dc21909061a49f368be161c8b23acbc1f77cd25b3b28fbd1544812c9deb78314b15651eef3414295449f1dd96fba8bfe3b4f84976f0bce5af677035b51d1e79082c61c2c58ed4724eadae80fb83941d954d6658b2d25592d852f8c3d40f2ba3efcc5695f6bb03a6807be5610303291941b0ff9d666bedf0c04a77462f1a5577dbb543345cc8f3259"}, @NFTA_DATA_VALUE={0x9, 0x1, "a935e9a7af"}]}]}, {0x2628, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x1248, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "c14406a0ec97e82c06bee1afed483d6f9b8d7cfcfe470288a21fac"}, @NFTA_DATA_VALUE={0x8e, 0x1, "0a8ff91f8c472daa18fd4b026588d1c45dc625606fb7b8184d6d2702b987862265e5bfa6a8c909e563ff91f49c5abf99612fb3e26e0977304f2c5fa39bdd45060d803985a325b898e4903a5d2d97b8f48e678d6361536441ce2519f45bbe0f2c91029ba8b936130cf3d1899ad44c07402b8d010a7238e56057533712a5d82dc5e1b7fb6f303f47f77497"}, @NFTA_DATA_VALUE={0x1004, 0x1, "523889238676c4c0ce87e010aaf21bb0ebf3b909c2eab49e39aaf5f36ad9ad80260476b7f06611a584532e21e119858895ff9b2b7f99bab07a5991de4b59c15cf1a5eececa304b9cafa7cd5d8d8aad42dba437dd9b5db17ff7f3406e6f805e207801f78299ecc7c181e62b635936ad7f8ca8c9559af311b2ea04aae772303721b949ee7f0e3c6bd9665f3ad9b6c6ac4573fe26f6b11420de4c2c6465b06e256b60d20e85acacf7f2c845413b0f63a70c8ab5576594416be1852e6ad005bf1532b3b4ede1272bfd3ecd62dbb9cf5a119df6a460eea8f300b3c3e6e691db20f97b68267b693feebb8b457fb3243747dd970f203d50f94f6e56f6ba70ea24b9319177a0f91d89b18e2f6e9bbaa64ad51c37d45c73bbd1640d5e2c3441e3586097e1c0cf7db7ca5ad43ca0aa387757f46c7e4ed5233cf73e2a04778eeab45cbd2a17c62741290474a8e5cfe2effa6eaa01093263c57a44b9d7ea457615474fae03a0448f57beb832f5a49702d782e6be5bca855b98cb2b8294c092817f28f87cefbd6b78e69abc5719e6ef5fd105572f52b2bbe1d4165e2113eb510798ed5f66d68270911cf651a9e8465d669d3f5ccc2f6a7200bea56dd9b3b6d477328a787eff358987b49e671ce48b8da1183e00d34920c1acd4792955d5153b19644041a01e6f631c04d0a6600c4d20ebe9a01962425e6028cc233248d41e8ad7734f7ef7e03ec7c203ab597080be82555e0cc769bf3e11b0259d42424973c0a8f9e83e03c9aa9f62c0d50e36a5db8346289ca1678c28e45b7837eddd67c80d2a450cc35f35970b4fdf9675dd9e8157afa18f8c8a830bcfc29772694c6c1d7c024cd077c80c5441bb864bf10979a5712586c0396a5fee93fd981aa86cd12e4e8df6415c943e82cefb1388323c281814c1a360417d0485bd07a4663376089440803d1c5e198c4458a9b09f47a9bdc2921e6526770ca8b127a76eb8530329e0399dd50cbfbaeca86b6a835892359a349cffdb8cc125fe8cdd53dc4e9279cfcf8f38898a6f38f50369b02ce3b6942e3c7576f21b07eee5916d8a12b5e4c63e597a8550990e3fcda3316fad79d02a3b9c64cc1283b226046bf41e2797ecc55106eced2663ccdd9b72f3fe924dc93f8117d59b61c8424fa0bf4fff5068c90fe969c16ad804bc9ae2f54f5fc5b725a868ad48c04e7c54a0f644b848a0d8e5e334953cc899c548bd1bfaacc9df2123f87bdab937a896a59300e0b0b57758b0fe67a6dab208df20d04c1fbe11b463757da871d987044e36c8128d57f2370bc75c41a0a7ff75001d6b95cbacff30a8dbdc5cd7772f7bacc75f22bea71d23f4581e930339a865b4d57baced407f6527eb49a7c0e21020bbcb1b8471040335aeda26f62db61b27d408b0e36a04c3ed99a6ab5fbe2e613de0bac1ebb0e43ec68a04c97f80430e635282dd7155238a80645fcd0d9cbf18c4ad663ea940a4f0151b5283e00f1496578a01b25c8ef3a8bd8fb3d050dfa7052c273715fe5d1fc778bba29e55bc303adba36861bf04dc54cff7c9d55c0a55ab0bf266fff9431d1c83f700fac7f384bc0fcd7435dfbd06bbf3f94866a2b7eb9ad4612e08fc2daad26621636d6b3b83b220e7996e3d9f42718a858e56daebed024ea946adf9317b3648a241dc46b69b1e94c7ad6c601edc3689ace966dd984f488e018ba177648d447199f447f9d9dac300f274d3b4637a2e6815fed2c40428c0689e1f346a40ead9990e93bc78f64dd9527d4f0a9d536c178c67eb023f0bee5a7c69520d36a071a82a210faf40a03f6c7e9bf94606435a94dd0e33c28c129ea835db5e2a8f98fd9242d46788ad47399524846753e615aa2748a751edb77c0ff02318b0003f39e1d0f74f09829fe01731909b5f2d18680d4baa2e4fd1dbca332356e2914df32d8eee0ab4be082fd68fa544193134a32ab3cb9553213b962bc0973fc2f378a1d3dc2e52e0bf9a6c8ea512fea03fca7bef2c3d1f2f61e58441d6e57a63373a2e8d9f93da539478c09b56c5070b4429a2499140ee6e4aa9898e77ea9ae968a3b018667d0e6f901dfb1960e80ed7bfa69b242d6d6595916f22b210825aa58575b46418f186191366789fb7319f896f6c5328529f3d0e8c3c2d517d522789456297f546a42253c32ca2e70a635a9ad5e7d9e39fa25105fd6c87b7d0bb1845fb1b05ae607d89352cc7c5c6ba035d0a570b17d01762b92d1d0f498f585a50f0a0ecc4ea19dfd623cd471a6d9837c42cc9936a43fdcf699efb6941ce4254124a5c4addfda6d4d5aff8ce511ed99675d8c002a316b70f536981cba4eeef5452ab58db74471bc8e6e8d6024babc2172141755006957b99be06b10f7a1494d13936b63d289ab7a4f8c1ceb6a1b57cb288e2c4f63e0ae16f8aa329f182154661b86e0b3d6dbf651538ee68119d0e4a87b70e1f4761b7d45a7657d532d4e7b4354a3ce0bbd446f6948ec902fdaaa564316af313c315f6d6a376156fed5165a205dbe636699dce5f9a417eead2f2c96f1219d4f5a680742bd0510bb9a1c5f2309964e53b4d4c6627113b454cf745617ad0ad8d19af7f7fdcc9928808f1ccee8623a27c3ec14b02a9b0704ce995069769aad7a0fa3e403102a546c1260d5208c714a01639ff33dcec28f0794d3b09813ac0f00b91628d379283e2097184e1efc70e72d4034f9ba0a8fae3bbf22e12de8413d9bafe3ff01f6f636f38d58e7e5b9be530d241b489e76673e9c78951f09246246c9863cfa535e561d34793a981d4d8d3941a30b723cdf9eb2349ac59c812ba8b7be9a2ae68208bfb685a2aff3d5ea58a4aab87c01b3de5273a36f242c17af9b3d68a075baa008316c3f0ae863f818ade94a12e4250b48ab0f70b8d2f89a82ba9111f10d9b32f0f4d098b2874616ab309fb8278a6bee7f13a3fe129b5bb26db3e70238cd67179d38ca6cdb56ea956e4d5753302cd14987063e2a6ee8090832026ac11e992ea9da1e6bffd8817e683e990341d02923387d625f80aeec9f55c6b22ae75fe12e2d37e3e2deee5d4f3d93c5206eb279611eeb51cb90fd0374a9bf32418c9df1b1fb303612700ca3bbe6b38d40479a7c3290afe45873d7feffc17926011fa65acf887b7cf11e530cb1f32e6586ec9e341cd4c0abb10cb16e4c85a6b4eab551dd4cddbdc4c55a5145048b7660d37d3c517f583e872e43f5c76aaff76c7cbbffb8d5696d7a42dec456c56554b33e98cc82ff661a57bd892a6503cbb3313c158986d4c3224155421fc1044d009e3171c5d7d991844473c729dc583acf16b181acad95d934268921514fd9d705b257b50df601c680e6256a9cb60140e874ec989f717c4ea3be778529440e63289fc0de37a87604938e265aacf7be1559603642ac383065e582730b2acb3bb25f5d008e9c24a790ae4ba837ae52b366eaaeadf1f9aa716edb848a5c1019d25d1bf95a1578b2b1dc96474ae1196d0d227151075ffb7e8f52caf4507ad4ad1f8c42c32774bfa9988e4afa8495e213a4c59f2d764002c71785fcfedc4824ff7d48f68dd22afa4b87575d5c00747d4272ecccb3fc83512b63765e758aab9cedbd146e5a6990d748575bc09c16bb73d36fe9d79b8cb4d5c6e65dcc378c36b3b2725148ec82ef20fbb3a461d475e007ac522ff5c84cdbacac59d2414ada26771db2428363b16a0dbe51743ba7c9e8458d577962332b083ac8960a07ed15205300ae29fec1ceff7cb47cc4f9b32f206811ee812dc9a1c1dbd2db67097426e8d1e31e5955f9185ddd0826af89997095a6767da966466f494c033c44d978b8839e98f811a431f1ee2edae3f86509bef9342912046f76ca68ae975c9bfaf237136297c54bbb84a2e7791eb70cb51a750f676402e63e6daa7765ddc6c0722dd962f33141389acf9c28c973d602e7c89fd95b99a93c7b481a702cac36b78d7fcc1d282929267a0cfb970f93cc036ab6e9529a9caf263a7f6a0ffb96c0d2d8c1ba79c825c68e5f5e881af8e29ba7097d443d950038190633a1d4bc6dd97179272ed7351c27c880d935892d2c0498696f9edfedd1cda9aef02fb112d317ceee7e868e4f1af2bc3ca0cbf78b2a3eb051b5663f9556cc615b3ae748764187af064ef53ef16c5eef2f5f4b6799a5646fbb7d4b40c53a2ddd70078ab4fb62e15ac602bad1e5804d736bcdfb7d3f5dd9cd2afed34539afd9d09680ca815f9b1987a6dc9ed83d429c4a942044f21114abf01a214cd41b20bd2eabe1d74f2fa984ac8f3815afcaa31652434efc46ac1d6e751c1a6577c5a6982be748c185c33ad2b1877214bfe32df6b525d55d8322de88cd0ec850e57a354baa87816ce7159ee686f7bb31be0fba18f1e951e429a984251bdd5d579c8d6cfb65bbc59e9ae200789895e5c5793d12593ea6e86e9c1043b536cd79ab9c19a7f8e47c8d5c96a490a2530de40b2bbd9af63bf40890f6f96a3ed86b053a0a61af04ca57b95591be6187faf7edfc29f207a8155dee1a084439f5e9737c3f0cdb438c44b77c3af803f387b5ba85a3b25e777ca141316188734cd72d029feb005f3d09bfb686c62645d567d1aa402f2645e7c9d8a255803745dc50134ad60cf6ea2bd3ba0435e220c4fc8ba574310a2ec7298a0327c44fa45746590e360fddcc16484c8c98b2883849d86247edc49e0400bdb84c5dd936e060b73347cb466b58d90532563be03e0c1a7f6a83cf35dbc38d4f71072f2a78d605cc9bab917cca992202a0576f93d949f770549739a6c04addcea5963557fe580ec803505135bf2102d64ed476b1588b48570b32a69986c3c542de72f178246c2a70940d19e746a5c86cc120ab6e188c9dca3d079a157f0220283d6418efd45e844a0891784c2b913a3a20be490fb2c6761dab6f10a2536418f30c1d1decf56824088be115495581942c111ba160f2846b8b0bc5ab992e3a1b41f93650827e41507495c997108fc48d12592503899e0688cd7b66523004fe63490af3195fad8bc6396c3722bf81cf58e506fa1aa2893b1748a12f10e0d1b34c63cba84a942fb79623959d36b109d7a3ea8e5ecd286a968b8a3eda245a1ea8ab655fc68670e25f10b67f84a51c19f6e43a7e2ce90679988f8a692ae3b71c953c3864e3965bea755765e560b1af1e85e165fa8ceef6ddb192e1799ad275e5a25f099b74a9d4348b69d1240a0af77f00f910fd66045e5f39fb00f79bc84ba5465fe15eba828f87c210b2d60a64f1a1fc7f2b9df929b78ac65efce2ae774db558a38378c796b7abd30a2b4468e8bc4e6d1c11e788aa7a83a9f8c66b89d52075132c8a5815244267ebfe9a6366dad5938fd9100c50ffb6243cb2e87f8da7834a81cc2527a7031d91e2307ea6fee2914ce041ef9dc27f4447a17f4def26bcc671d036c596483b8c3afc87fe65b3bf0bf130f04623723f00ba659cfdf54fdd65e75fbf6db320a45d5fb072eb9d79b0215108c47f2f640c68a1b75b9c5be3c5af4ad1107e4d95e128aac0eee898af2ab17332dd88c4fd961e94345db9add3254fb32f43a9a2586625e74e68c63934d14dcecea7816fc764e7d05efad454f33fe6cb0c507a182c907d3464f686bc891882e4c7590048ce5e6bd98f42755a1fb1253c7fcb24c1c341280f998e625d33e4367ec83ef257ff88ff42e43a056deb027f7013affa84d8f0ced6ae1a9cc375711bc64d7ffdbaf3833cdef5a62ba20d8c49e7b3b816742530c404a886bb79e7c9c31474cbfcd370b6c5d407ffdbedb7a135f555e35e0cbbbf64ac6bba0b3f04701248160c57d137b92e10968793b4014"}, @NFTA_DATA_VALUE={0x9b, 0x1, "c83f4ad521aea22b78c606d2a64720892b6ba4253d87dfe41efb9c52fc441df7238b3a9e467e0c7c37ea3477e93c6277868487a63b2099007b9900c74bfa699210f81c5d62a57f346e4943f175709d1f87f70d0bc72c8a7a05d9eeff67a340757e6484736f1157a68fa1f49ddaf46ce9701230a05c3ff6fb190402518210fbde3ef1a38d130e537d60bbecfbb2de5c5b1a0ca2ee9a27af"}, @NFTA_DATA_VALUE={0x90, 0x1, "dc1ca76f1c3cd7aacc56e0f68e281807924ad5099375ff8d1bf12288bc11662263edea84d731b0eefa88c3606ff2e4656ef460faddcbb9a63956969e1357f2bc7f834c47a2852a8ee334444d673ef931177cad6b726330ea52225951424f52574a0547cf58a111a0f30fb0a9ee6d06d1f2c8f4a6c4a18ea04f359a05f0faafef69999bf95c44c24845724ed3"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x36, 0x1, "45a7b9ed6c4bcf29cccc0812f6e5621508efff8cae9536b545ee9fe928d615e3ea95a2afe2d84548839cddae4ac980edc41b"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x1104, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "77414e0e6920831a43e9e1b6ca149e2ce091b90f6392c5ec4a370f948fb60c578a1ce01786dc76dda6d4cb0ad30f7287a67b3caf584922ac16bacb16a2d03d20ef2360a6937387fc887759c1e2b9d9146f6566d508a2e4b46d9cb62b8536422dbb04ba784782059e60f98ced52556f618aaf8eecd634e9ed60bcadfff4224e3805f171f2e0e951528157eb9614e1d81208fc87425c7fad00d8801929d98d6793b7dca1c3264a9802e951db1f3b75ed89b8ce1ee4eb2b3eaa75ffab45e29d4111ff2f36c726e6227133105f6020085699e4dd8140e13eb34f7901f6655333e775f6ba85b9fd7557eb266849a19ad3591a24ef3b3a703ce61efc3f0012cad785c643a6b375e1a7fcb492b9f43073405ab443cd8b12a898fe9943817d0c7116a5af0af1696cf4857891c5bcce5399ae24dfe217f9611e6912842a121fb652adb81cab872d6d72fe71b2bc81ceabe0b073cd302748c7850abd930d3b015cd2658e0226ef2102f36d6899d115a755c102b011d967ae746e4cdc33ec5d2b29cd452d11f1c97b44f6bee8d9f82673b8ce966aafd66d4525502e86f2e3fd79c7c2e92dbc04bb70b9b9050e1dcef19c87f4ac8cb5d57cb50e399488cfac81ae943c9159406d68189455d221961e8ce109f9996737bcdbe66c53d0fc11bbdf29492aa7e90b1409bef6ada13b58ed914680440f86565b7ddb99d9acd67b40bae2f64b3ab14481760076c81afcf411e4e88fb2643fc955b37ce07174452c2fd2880478417c6dff6c468c7373b58d9ca44b0188b21e5140be71edf379ca814d31a35c3632ee6a9ab26240084e775da0f1da0177cb971f0388cd7c0477ba5b470158056263aeea0f7f35b1e70824007ceff2cb7070926e94e0fe8594b95ab2d0e1aa360cce5a3b2dba7e3450e4298208b768ff383fcdd48d2d78d38e186aff94c33c15890cb759d33614d999d82b0f6a3dbf5b809bfe9d226a90795c9db97bb9851d22be37d948ba8ff5fd903f32e9c8396e01eaacf2e4effb55efc93fc08253cc8cd62c48d26d282dcec755a4237e69a6753e2b02baf1079c4b1a755aa114d806bb1f0daba23e33fd4002e472aebfcc1cd91d6b38c469129f5beca106c471f3bd29cb2df4753ef98b7aa2c794e6793c8f32a90cceda614b81ac27cb27c32e8e920a9f357028150bc6786f624b64f1e997d33d2f904d1359d6ecd27cef6c739da003a5d8fc91dbc6b6feae23002b4c143c32cc45bc18f2b89a91de49e6a26882f9fb63e116209c5ffd4df30b0d4a1f6f9e3444e531ad3d52261b9d9e63695495286dbaadf15b795cba9aebd2ffcb2781626f1cc5fcd9e7811bfe9ae3566b384a6b9991c10e9e258c436d83e7c4368b9161dbdf246f48b2af6803634a6d721e46f4633c4617bee4ae6a404baeb219b8a8c6855a6c96f8a8db6e531ef6dc97077be26e372858bfbfac7855052083787006758db0cc9a6177bbe90b7a976d425b417ab116aec57831d22b34b0bfc39de3fed5c62364952b311ae0f7ce73c3a5a15866d95d51f5d9ef6b09785ac80680b0c0d5124eaebcc78492e760511b39c6a5abcb8e1e78e0d4ce895a4cb4ec79e37e578630b60917c6e78e42976f23692c5a1e9d40ab0ec12a175ffe260551ff733f0dcefb83160068605ad1ea406cd58e985013fb6b77d49b47efb56624eb15c00a457029e58644105f0129379f628c5a1229d967d18074e7e867b7cde5a30857e7273d370a02537c32058bc8023d4177076d3c97e7ad7fab756c2e9d544873ef7bd6aef49b7b14eb4b11273ece6419b1ad7be5db0f6723f0cbdef047ecf621eb02443a3eeed326f5e12a3df1b2a2daff32f523974ce7a5e21c06b1e79cbac9560b94af7c9bc3a1aa682d271afdf07f45f0b08aabf26c3602535ee8a74d7396410f47cda504600be7e18bb724edb46a1a58b67bf420fa51fbfa81d3ea44c4c9f992c285e9f9573c4ae76ee547eebbb1ead63c81515eaa7e55bf7209e45e0309e269ea51464d7ae82375990c26f12d142d02d1176d31f43e167426d3404d8cd1c7782f23512bfcc5e7f41edb87e31358895eab491502e1171fd716ffd85b9f8ed86f4f5ba6ac8d98669f82f89517cc4571d9e123a0192022efdc30527ed30f8760e7a6a2817c185bbcfd9c88cc3bb7b1c885a34469a18cd78d4806ac1211ce2f403210ea02a10b400b71e7dd8a2b436259366edeccfffc724c822597c1d977d8659193d103bcbc305891850a1531092ce89cfff7ebc2b2818558d36d73c8b00a37eeb735e5178964dfdec2b2079e2a0a9ebdf2b605cd5d1fca945ae1bc44712ddb21cd442bc0ba5bc9b7e38d4e81b106253a0d739b98bfd06d1c12a29606b15895e9ab02a4b5f3d6b06f9f6ad75721a9aa3bcfc3ae974354d78e7f1166eff8adc5edd7e4651cedbbc3a85c86255c8652777244bd42c90cd094704f6a90745cf7d7e1e4dbff1f19a8ffad19ad6ffcc4cce9f60c8f07b46eb7b0c59ea9fee7163f847ea7dda7b71a89824aae1b93eaa99d20b0fba10df851b3a2abb303acb75178bb0df5cd29efe59d378e713d4b759d2942690c77bc8316f3287228b5c22d339a4a8173a6e8ce5379a4510ded99fe1aeedfd3ce2bb8b03b67a6c5bf225e5da5f9a8be4bf39367d69ecd977f123cd7e161b7b3d392444c3b7930bece0a9efebf160de3f830a4d8f45301f4d14c935e1f715fd144659012669c77d068ca2a084a0711b9e9890e5e3969389a442da08686f749457456f511ecf62a0e5847b84aee63b9f20974c70ea32a356345a4ff1b5a13057b68cc04606de9b6457c46cbe9267fe439f72db7990556b8025696584b2647cd1463353aaa9e6f6771b6fd0b7306a736d34852dc819d912d4ad1c49a2bfc44425695150e9bf630fda91eef681fbc70164fd44ccc09be38a8c0873ae6c010dbd667570bcf0b0705754d8e4998eb03759891c5b224491b7c93ab6bbecd8e73a4742ca414c009f04356d5a48bc1a9857ad686754fa8d10bf865424d8b5e160f6d7e4c02b495203f63e6d34491230a072294c79dd634508d47ea189b5835e160194c7bc1c430a14a40d5268c92250b378503f3a248214c43bf2efdda7dfc333533a411b1d54cc1e0bfc10c08b7f55090bde5007b5a6e7e76cbd4ecc160e5e2548c20aba90e42252e6ebe8f4401e871483634d3bf948dbfbb36a099d3cac87cf04bb9f2ad93c5776a7373caa5ec9d0aa3bb30791707eb2d804edf07db8d552d1cb0e20596f6ea1fd6751fac5b37b493d9c1311a3afb31fc57b9d95a30434bef7233e35a0d1716d8da52a9f82b18af43b7e8bdbb42572ae8b306b28efafd465db8ec6ca421cd679201cc4231546aa5e3cef8221b094bcbda93738e04f038766b47a52bd1278348f984aea41846fa43b08ecb7b74192ca47abe76f258119006c033498ca03f59594a44b5ba13ce5d86687bab9ac021aa92831aef92e21426903ff91758d11e5bf95db3e984ed1f39dba12dddf1ef05453d2260ad57401e448fd7b24871b993c0a6aaf8a68aa3f65f5ea5f9626f18dc4de736782f638fdbd85f08e3a808793850a6f45b33070864fdd213840205a37bbbf2ffe0a30eb7f745732302ec01a5d00c18d824ab5d384f94d84390d5a3eb7a5e058d4a0cd864505b520ea7df3c9ae63f5b9fe50dfe55a1fb2c716f566ddb87c5b01c2f9355ff8f8463d58a85fc20f07c01c8581b77698b06704c04eec0b4f7fd4f04232f1713f6ef96a227104eb83117e7c10b911dacf4595833dc5df5001df48c06312d6f2c522dba548b6532d27fe837ab8033c380a2aa7c0a36cbdb525363a375c7d76125d19becf90defd73fd4e2b383c771c4376ed6cf16bad09dcd20c62c0455192bd2797e50ea0eab29f4a49a667c8647819bd2414e97fa47100f90c71134f1e2bf25fc2b41bfbe45dd31dd0dee32774d56ef2201e3978de69baac15a9ce9b38a30e186603108462913b779c77dd2bfa2af166fed9604e1e7ed7dff3f8b8ea4f9971e9834762dcfb1814cfabc8334fb099c1d6639cc9b44dbb2fc2e74ff17d686a7d11f69781dbd29491a6e4d3c1b8fa25dfaeb2c8e0790bbfe1427dcaa8216382253f7e1348dfde7f456abe11d257a43db724baa826f63592a89b462143e7ae5eb4def3f48ca66bfb7031734cc6758da269b440170723d48207529a9d1eab232c1be7ee80734f7a270fc1fbaf5a5420909b590767fbbf12f0be08ba0bd47f75576b56fe54117bce5a1c45068bfb1b3fa3171ccbd2edfb68a1f4220481524f2799f922bd90182e186e74f68e91255eaabf68d838294bd6a5906ffdb6f9109210a306b16b240ddaee5b8b906bab750d33878501b61025ee5381919fcb7eadd8016e3cd5bffc5494c52a1803da6e983352e9c8e7df6d96f8f3fca5d9ae1f3fb645e9977f5c641af434c55eb4cd5695b4bdd8f0bcef27cfd1fc2cdc4d6604d1dbe9e5a55405e5090f49261cf2040b5ce2e737071e7cf24c563a1d36eb5b16f683152a72cce9eb9294ea0f411c91001fa4c793a8c481bb1b821d49b3fc8c850fcfaaed9b51fa8d7fbf73a6811f22b7229052a9c4dc5ef340c23b75767fa6ebf19d4591dffa42618a6cb40e83cf87361c8d814016a0ec8181e74b2e6bfb8dd6ff0df2326849e8711ba44e85c9f2b58f49558b6fa423ca7e3374ebcd93bb20c5fda2d4bd1c729707ca1ad4198dae28ff3587be6429f41e6c9faad4bb3d97f32bf0d69ff0af1ce6b4c100a0f2dbdb46233712501b1b50ea996c0905c6132474fdada66f55398b9beb698b56d70a76b89136b49ba4ebb79d95dcf96def71746e9bf1ce57bbf166cfffbc3263379478c54330cbf6db4ca43d6633278e10f600eaccf59c8c59208a65efcf476e4eecd2b38e56b71cd700d669a39fe05019c2286c828d781f34a5af5c1386ee16aef098d05e3df9e58a9c5e1adaf67b7f64e90ee9cae8961287d942ef97c31f3180e03481794395cb0cc69aa27957c00f6ca9d9f0db2dcaec361f0a957927fdd2cb5fdf38545c8ca05be6a850ff94e03655d8649fc42a6c81974782a43dcdbdabeb8f9f6a8b2a1e43600613ea82b6ed1b822247b9fd6eaadf19bb28483fd85e04e1003413ee373079b70d7aefd4b029b29524e06c98726eac594dc8f102c774678acca1b5aa5c4865c83d71b4e7b21f1bb6d4c17fc9335767a25646eb9b60bb54e97fdd2fe3992555dccda776e5ee1fc3f4c76fe7632b422a23b10c90920af841a614d06f72f058864530fff80ce8c34414288af1f3449ca0a4565d3a84a7d4b5aede8f7ef2373b410ff194d72be5830ae2ec56ada22a27df9aee924323ea4fa18c56fd1a36bdcfdd299656453bedfd2c787c3b4b880c58c04dd9a076451e41cf40793aea007fe55e84faa0c5b0fb353796c7ec643814076a4badd125d0bf0886c764fb2bb2647d064673a675f50ff923225b367b6c186fb0136a588574ef6afbaf51a97dd68aefeaf5ba97a9ca17137c60ec9e1b12fc2972e1f0f5ec0b78feaf7c87da6fb5fdfdde407d08473477a3420b35fd77b35d2105823ac4797ef29628a964fdc0a540e1cb819674b37b4635768271730910ba3915f4e9a46c47f68f029fd00d832e757b6d4574ab960c9b00ce64ca99ce1d295fadcfd0dceb51884f9a5e8ad11c38a7e0319c5be3e3177e05b437233d2b70b08ef73266b194836e58baaf5bb199ee7e11032c3f2c08764b6860978d41ba1fc33a28fda40c4614735c4c094b2fc9923f193fc124335416257e6b9178d5cd67888f2a043456c45c9f01d4283f983a92320981f699c"}, @NFTA_DATA_VALUE={0xdb, 0x1, "fd64ec614588704ef99633e3904318a1356ecbfcef1e36c76ae0cd1dd44fed7957942749b91672609f04000c1b7f9eecc4014f2679fac85598a51f580fbbf5487e127ae9a227f9515d3114604e2238ed19aa07891d190811b962547206c1e185af11eeb3f402ffb76a9dea48bc94b2686c69561405133f0237fd9792c61a92437804ca6058d11c4ab1e75ae6d81028b9b1680441a559f17db3195c4ad60a3f66f1ffa9a4f800f8297d3477f53d2c2ff34044310c496066bb4e9eda77293225d820f4314b520a834b428cfbe037e9d1e8577fcc4aa68598"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x17c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xea, 0x1, "eb7fbeadb2d4a20f7d7f492d99f1b990b82a9dfa9f4c08edd4a54ca11947098dcec967bfdbad46ce08573e425b09b45de9f2c3630a9f65e9264bc27c22136272451e02f043f40d05352f480fffc20bac600fc06ef80a6b8b45d166ef9e8233ab022a4998276b9731cda131738c618bc4906560e1545ea08160c910181a3eb641baa369b57bd7a046ee5662f3b15a61e5398bbaf45bc0324d1a85d69c425e1295be4f21b1125bc11e00293f36b6231b355aa2600c30dc1889e33913b6b1152afab04c733994d6b6cd0afeb314b81190c96b2c589495560a71d63dafdbc0b55595625ae01a5c23"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0xe0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x28, 0x1, "9f5262824a3c5579345797b4a775e9aa5b8269dcaeb83aaf420877f12900deb17b03ee34"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x78, 0x1, "937f9ef2da0331eecd0a17f9916d3c08a250398713553095a8c499fa4987201201531cc76b787e6db70d55bf44e8a480fe00b2cc23ae7b1128c10bfd01c06185db51efddf7b2ed272974725dd528a3597febbf538fc2efe2c6d4b9fc8186973506f8d11f14af60b866e4574e125e5effff5da80f"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x38a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xc9, 0x6, 0x1, 0x0, "89396ddfc60ba7166934a94c1b52d620d34eab168a23d8710f0b0cabad9e8e6ee323936538382edb1a4316725527bd4c6affe925db512c68d3c1a28f24a02bb969d89481090a461896ed89d586c7ddb5f3d8dbd25585ab76e2e1b16c85b417e873f2b73fcd095a42f864a2627e364b3cd8a2f7d9b86c975ffdbf71b2c303634cab0752da831e212586065b3765328391c23bdd3915dd9a13d8e595f68919f79bcbe7e922196d5b7dad3221d66c882c5f8bd7fbe3f2b10c2d08e806cc1c1ccc2f4fdbe65c78"}, @NFTA_SET_ELEM_KEY={0x1358, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x55, 0x1, "7abd577ba9e22e5f3011f81515b6afcf1b75edaa012fc7ed30cdfa45702ab13f2d13866699504ab07c7f2d228d393db8fcc4944c233ae32568a7fcdfc3aacf3de51f616db636ed9931176805bb3e41d7ba"}, @NFTA_DATA_VALUE={0xb5, 0x1, "04ac6e446477907e1645e2455518b027fa8a0ee1d3a3498742e652e72857f0a7f69c90e8c089c71fa15e5880e835a53d362d65a701f66b798da83e34e8fdadecb69e0de43baca388db50938af58eafc9cbd28a8c3d057b9dc98f53cabebf650a8b5221f56604f85c87bd0972017ce4c312a323036b1257e7f7b68376dc9cbbccc31a3e1cd96ff3d42e8bf20acf3b58f26a05e01a11f75d017830c5692df5a0abfd02eee0114d8fcd4f24cd463beb94f615"}, @NFTA_DATA_VALUE={0xf0, 0x1, "53d94470d8dad72243e13b95ddb0eff98348dbe4296e21762176176d3b4e12e94a4025b67010041a1cd8b6f2d59b984a70249fe70f0e336ecb432e2b18fb0303f37fcee5efe63e0ed6cf12fd49581568d370cb81a0bca2d20038d7f77203ca98a6857a4f70bc3b8ebc49fc396144a7d21f0a77fc6ca014dcd4202124f183a08dbf9dac09da1cd50e22238733e91f9edf77ace824931fbdd7ae5d10c62c5c956ec12e7171b1b97cb8fc41cd5d60f3950e34d55102fa41e2f415058d1b1f33c382ce43106ca427d5f20fe96fbbf77ff08ffcf1f23617b9a72a4389c00a6cfd2ac100de22aecc6f3beb9081ebc2"}, @NFTA_DATA_VALUE={0x60, 0x1, "09636c1f90e35e9067b603f8cebbfba950c1a6b66de88720a60a6533643d72ee1a4fc09855b7f903aa5b92ec098d91df3e072873a79df607ad7b2fb514e12adae2cdf0b1bf9c220e47dfb34d47f300e58dd142b36d83d4dfef9da7bc"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x3b, 0x1, "efe6b92ba2ec69c03105d13de22d7cd7d39800b60a0c853e38c92a5bef7ee48b1bce0b488fdbf7013cc71e03b42e6fcaa4bd0e779152c3"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x400}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_DATA={0x1230, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "3d4f16bceeeb691ca430261e156694e1e197a446189ede640d285e7ab01f04b6620c77ff94bdd7ee13"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xe1, 0x1, "bb1cd148d663cb9907fce8c78d271316595a9f4cfae5516a9a25fd28f101dd144325b2d40c2e4864980f32380e50a8441b9add150037bb0b4ea99cbeba0158920d13d30f274c180de0d79f411f4fcc77bcfc8a0910ba24295ef42b9fc5f339ee082a02de1a7cfea63b3068e01906b821ee998aacf4b59f2992ba5184484e0c315083b2cf8483c47fa8b3533e58f43c929900578273025726edb0c0b1f4d8d75d27c71794d93e2e06a90dd687f97c35ba80d03776ac2be8ee37b07138355ace621505c9c346dcec15f1f2a7c300db8761e10dc2226620141c4684c06d6a"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x58, 0x1, "bd63c811a9cd33fb0e9b84b8e0ca71e07e3bb7475c503449772aa6e42ae98d4705a0f809377893ad3b36dedbbecfa4b23578c9dd94bff1e51ca11d2cef00222475e438981b53658de45e97b844fe4173e4b6d072"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_KEY_END={0x1230, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x82, 0x1, "db5067056580daf0b57f6c561cffc93627650e284fb9e5d82efc69537fa92b5336d4b6d60a23d371850651accc37fa92868f4dbcc5d7d3504fd2c8c633a24ceb98e9fc79cd8f39eec6c63c1d22e768c453c70c866a5c0a23bf4889866b3408f406f80847a403d14155fbbd4b18568588ed1c3022e16e63d8e5b2b710b76b"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xbe, 0x1, "9d8e8e1b7b3142b6331135658acd60a890c1cb3d89fb4f5de5341e4b7b906122c5c7473da21df819b90af958fa86e332c0d1d19924a184d4d0f6f572a05dbf87cce8f411bda2d2bd8adbf9eea76e9a1168f7b2dce2593927201f016df593bbb285e321fe03e9102a1fe26556d03a716ceafe0073bab53857fce8f69c6ff5c0a77c367871a5541bb295c4c7b539978a36087d5f62159d0f1dda2ad67b5c4a3e9dfbb4ba97f7455fb4196438692a567e7661d0642e7bcc2f254ca7"}, @NFTA_DATA_VALUE={0x8c, 0x1, "fe9bd573755c0da4fef4a78d0df3202ac2357df3e2af7f1345ddbd5865d9d3cabfe376cbad5c10bcfc158c0c84fe9f79da7a0717195da9ea99fd9e93c14e3be260924c8a6b3d63657c14450e36c38e47d45b0efaf72886001afc23df32bec86f441479ac08fadcce989c7b7a9cb0d9d84c6cac71263065fdb9b11430d18d331e689ead8f68c854ba"}, @NFTA_DATA_VALUE={0x1004, 0x1, "43dc29e914e311dfc647a1c37415420dfc7e6fffb0f7db24cd1eddf1919e9bd24d3abb5407d86618fb5c18b5c031b42ce787aceccde6c3f2c0fead89b7413e0c372a3757ffba8b81d2f602fdc92c35148740b575d47b62dfd43782e952253542236c9a6507394123999689d03b428cfec7037cb27c3065755fb5b49a630bb3357a195bc6620915c247a58efb6d751d46e1e6f1ff52a0da4b73d3db526328b56ffc93124969e2ffb65117b4055d300f553ff47598c6206d9ee69607ca1f7f012526209417a303f5857a8135bc01e6c86798ec4872c93fea032c310b41f28dc307d8bbaa00d6ef5ed9a0b8a94f169006e1d6dd7a738acdd0899b53e0a54a7f930d63a8aa09e327630e89605d494d9e1dfa4ce06ab8058f155496fa59d628ffe2a2b68c403a3d39f22b81b252fc3c0d2efcf412020391aaf65f31b467120ebab7975fa8587d85f18848c791f5a2fc589efd9304122c68bc5c5d3e5dd2fceb719bcf25ef386851b6d59c07f457845648b9f0f4a850bb640a22514db878ee260b7dfe6ab1017d2537e69ecd5b9eab37d30074ddf74fd438075d3174dd6956b0a70da77ce9645061683eea684efdb1cdc072f30df847cde161275f6a6a7cec6e87878dcca0c4d9c642ec9dc4323e4da781aacbae25bc6a8a186003297975dc4a0ed9e9925a21c566acef6916720ec899586697d1989e20cb834b6f959cce355c9b8ea55ab158828aa42b7a7435507f380ccecfefc43bf7944e64c7730675a3578462ab41213b79b2fdb89b54b1f77cb55abeab12faa1bae74534cff91a4ece76d9bd08d5417fae75b8da5b5ceb667b43df48eab6c746060deebadd02142bc92d2eeae2d9bdee270f7a9c23a5df2047112d7e984e95efe85f2cdaa2bae5e6e922f11a062ab0fc5794ca231dae666e381fdb386485179ecf64e92aa69d7ae456ec75df389e144e4e8ec389302876da3382e5bc95e7325f38ccc4471221eb3750d603029660a75d4f062284c0f5f33bb72ffa864f91485341092cb74b5378cda2595bb624e40aec1e73a0daa7a9b874e3526755bacf8459736640f7623cf1c472f04ec7632ae4e20802cb399c874aa12b666bf1ce9acf491ea2f84312117b006fff3a32f5ef83dbdefb89d3df49a9c2768920ecfa978a9405b99c00e4cd60f2ea0a79629766bcfa78a9451fd487a36a655e7dba94e550b40a7c464176ae3d90b1fad7edac9361d12a2d71fd433d5f5e79684a2837c24475f3b625cf331effb64847f4d035258fd02c2252585c540de123f650ee0e182cb48e018a2955d215787df3d773970cde9424c1ec31f137931de1ae8a73733db040b70beb20c78efb72c6a41eb5e285209ab1efa1614e07796f8d988ff3f73eb062c25a2874d2796ee162c3acf8f00193c67978f0cb85a7f12304755acf931c33de2426d1d14f84130e248a5f0fd2a434d5bbdca42a60b13aa292326342d55b72b1c36a2a2aa407033710b3eef9bd6f5ea810608f9507444fc8a7f0a905e11aaced66f75b8dfd58bf860d8563097f55b850fbb2a8061657db288c427011332f05ddc6fcf4b4b57155d9c601ed2314463dd23faea8c0b5acffbdc8bdc9a6dc70ce5965789239714ab203b5fdcaf56a59febe27f16ec124e4167c6ca3069fe22fc649b77256215176a3db58fcb358c44f98db2946dce686403890bb5c3bc22a5e53e4a2137bca3305625c4a0f986d4d302bd75031a70fc6a7ae4384f423b704777408fadeca431b33ed62917fb2951ea73a08f78d7e462238e7a7013dfb117d089f622a62a29668ff8c470f7955926da86a826de7af02fac65f46910a46f4f704046ca18023b64c4ce98a799534f9a27cb9c2b7e6efeb209843bb660a393d8a06c2a0b23c18dae98012f22202a7cee9ec07ca6107d20236b5cda2d874da1dd903ae2cb63baa0b42081b4d19da0ad33c17120ee09136913bff12813f32f2bcbde4905c7538f2bad131ac6fbc02f0be955f4cac54ef4c71821a0c288cd6e9c58cf4ee0377c4f1538e84d70086e5059d069f2a3ff2fc912ba9f5e1093ad5b6483e1404a2586f885395c4d0e98b924ae7558b2f7d121410bf079363dcc49438d02f92a61f8e7601db2dc55df78b78c558dc9347a02b4d36269829151058e26ec1ae4b5bc90a82b7d31838b0659ad8b0931d5b9cc324179494cefb1d6df69aedc8d01de9218d58087690f53926ebb0c02879179fb55c43e172bec5bc762308892c3853df7b1ce05bc1648e79a57e12022a3e1dcc3b19a2089d82daa316687cd13aea1dcb2bf133d8218749c3f22d3884acc20dd86a085a660abc7cabad807d1ddf2faec9d5790abcda983e3623342d2bb02c1b8ca0bc04cef9ff21fa53606507d2d9414db3a4af7c49ca41a01aaef0e0681a4544e9b620ca08aa69ad6343f7f639cd0c7cf03be7b1469cffcea70a28f8cb8e7ce74350002f3dff958199a75538265824e495f6a54d8109ba9619d98f8aa3292e50cd10fd3725bf4441c99b9118a888a2dcff12826f879d3b056d0c0c3b32104627850fe7693e1450c96cc2d59adaf171403fd69fe1c8993058677d8f073af9fcf439533567ce1e3f38bd1b0e67c4a0ee2099932686fda6ab274ef6d69da7d3735cd7099a277dfa4c357be37a248032dd80f69ebb39719d0e22b390bd0f3ee254a03813a036d3e7e79055fc742d7bb0c67a7aea2c11b257a5072442b576c05ce87181bb68f5dc72dbfa9d2d6e6bb6b6efbc3fddd5dfb77911131c560733f1bfe10cafba76b2b3ff97e4798e880eb96cc971fa24602b0d11c6b7c63e4dcb3251df1b5c817178ec45af800ed9fde4b6af1ed85c7b42ba016eac043e9c9814ce86a4d139844217cf9b16e323f0c35416971732c8920250c5aa9645c8afa12e1f48b2e1cffba3ad187c7e443f42c355794614e87ff4973aff02e53a55fe0cbdf06621ef5353e65fe85cfd0c1dfcb55f37cd9f1c82af541095947b36c436e0674358e88e4be6c94d1f26bbbc803065974cf32f3c6659c06e3fb6abb1d053940d41dccfa1a40d334f076cba7c184e7d85df5ccb762d911b17c6c8210d7b05bd9da6934f7bd6bdcc9ecf77131c2b2dcbe1af143c648d6116295a6bec8178b03098a9d3822bd5e1e57361911d277b9827411e0f8a0cfde393973afcc38911b11335d0c7443479558a6be78abc7338435b2dfae11ab494673e4b112b7cd2b53c04ad10d23cbf9560493cb922680064a4a36aee10d45775e9008ce1113c309113d02c6f5bdc00e8e85c0afb2f57fa88c0a5dbfb2bc4a31db6adea4a184b264f673b8ee3f52d58397f24d53a94847ee1aa373216144bb6e6f8a16868a2f217e6ac865889651d6d2d7fe77ad0d9d644d2554e89f0e634e7a1cd5551ea5a2b28c98c6b98a8921ab44b4dc2fe8290801773a6ee6efeb31c0e7744eefce938c522f9a856b87fdc5005c963f8ea350501de28896c823d94b3e90ffd44c9457b9f611301ca73b52270136d28889423a7a16864f3d4b1cb865378c9911b561070b4d0b738a8662372afc3209e19667f218c188686de8fe69741be1ea6663dc28d91e1b6edba1b8ae3529b70fc5d1abeec251a0024a7ba63008e7b9d6b4000b6ca3585566bd89529cf1c8312eb9cb38b79f5b5bf1921899838cdd72548136a1bc2e71d38d68bd82cdb4721258e2e9930f99959ff4c4cf13e02ce8ad47c392644e698c31a79bf05b8bae5843b290f71037f851507aa019df0a097e6ff2fd0ac24671e9ef374846dd1a3c804e3457b6ece699f6b6a8de2e4debc7a99a9e388c10067cad5167f64dfd520a36f625ea3d758e745e31faf078d851ef8d3b51e748e7eb13cc51409f1afda2523fed0d84a63f00038209178981766e45ed76d2d97c84bcf5871bcf800168d9a27f886fde122c3cbeccd1e35be87c2efe8dd543bb6df2fa02f071d432385223613187beb4536b4d5aabc0e82ce6a2fc648e0fd8726b786ab6e9eca30bc508ee52b635d82dea292d3f2b01d7eacf6a4b4dc1a67a583d6b04e030767d24ef250dd6c472cafb4fbf4d8351f61930486ba478fdc8963da3fc5adcc4e9504f95cc37ac263eb1db8f348ade6fc67bee4ad158d125b6d3cb5f18240af1629d7d671f9cca180ce5c39ccdc7b61a75e994f7f999646e5ba902fc586198fefd2a61bc5da0c15b419cdb8c25585e6ac804db27af320d78a6803c60c7a4afe2b90a60891f3a38b25539c99456854f50f1a6392e1950f0dc5cc262935be1c2801acfd1040a98098aa252f2c1958cbe6cc18aa67ffcaaaa99f3c74f9ca5a89eee67575ed3d6313f4b2414d25ebe5307f589189c6611ad61f2215c0b48ab25436bdbed9f5838c9fdab509861c4a5f2713d2919fe187d7e25ef4f478d9ee1246a4a9e9c6e5d0695477fcb9800c03f83d678a8d46613489929b8bed93ec768986b9ec0c1cae8e690de300d8e67d982cebc7cc723cbf5d5c51f55fce2b1e6fbd7d323d683f540d7c3211254709ef416b78f56e304b616fa9c6a3c6c8e2c6558ec399997dea727b5be1b76b73e9295fbf1f728f3c1e975ac8a896e93052f3fda8ee4800253f536b34d9a512b37875ca8b006006d69144f8318b898b542349bdac86f3e9839fd064845d13f00a4794f79f5e87938f8fe1effd241a418eadf12d8123a1fd4c7c893c206d1a0cfedf4c51b29f6c0d957d02735c5ce6aad1b5dba49c22f594628239a0873ed4effa6023a58aea74c83656f05c68eb7747e3a04e6819b899cfca92b56e22fedae4f2d59a9cbaff13c3dfa74da7c05131cb376f603ba4284484ceb1cc836a9cab177632caa14c3343c86edb86de55b2ede088ff9e04449a8992fc2f8c4e4388b552e1accdb142af2e50bb1536f9c2584d78cacae0a0906e805d417f3db24c160dd0757dddbb2dc4e2fb2d82702cc3eabd40ce4d28ef0d8b6e0794367b5ad48a0b8107e9463caa8febb0bf0aec69f84735134e6969f70a3a178adeac023dc5d20b57e88ef025390e2e5283d21f6afacb43cd803a0c1b102f4d5a39ab54bcfc12d8330f477047b267d0214afef67d5df7f7820fc5ebc69cb0cbfcb49d0ef616e8813a476afb43f9923110f7f564cfaf9403a1162495e2c1b3ec21c5479799dd00969c770fbaa7330084b27a32917f19cb9e1659eba0f526a8e58838cce5b1bbb40472195d5a466b2380d60e9412e7598abfc0d82bbc7df683f001a1635f137e3067f766a449fd2c586c1b31deb76330a17daacbbb9be0f7e6591816a0e59f4d395406f9d7ced9ddf7f80da4a2b3c744e8a2fb6462f36641e7b0ef17dc11da39a6eb96274ce655dad457e1445393d8acc9eadaad255903badccc53ef1317699b096c7c1d3eaad57000a947d53f1cac046998d339afe37ee8d2a7ac3cf54e7a4bb136b6b6aa9acb3b83be8979d1051d6493fc098603441935fb68f6609e692b57030aabfa848f77c6fdb7a18ef8963f819f73d55e9028a7caec7cb4afc759e92dc3840ee8ab1b354048467bb0a73794bef742244a693c3ccbd4fdd12e046fb1ed33d79cf6a63d529492b67a063b3f410da25fd528f502f76861b8e359473499252e7ab921fbd046676a4b275892c0c7fef5784b97b50d63b5c62837aee74dd9620a866f7f655856df0ba938c06448a5f17e058c7559127201217cc6bf70261e64ef00182d2e033f9984af1eca9dba668c27877395c5502aef63665411d0a1d660611ccc877ad69bb3e82c8868260cd9c2e8813747fede3a44f05eebc612f168c312390e51176a1143cbcdd42ead22116508f20504df99a757a98a53bff52cd9a870"}]}]}, {0x3fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xb6, 0x6, 0x1, 0x0, "dd87954e91365b128cf65c644eb661b5f83fff87ce3153b470910549f5c62c648da38026056334a7972b526bbab0efa39bf648cf2582cda9e5b5e762e26cd903608e6a181431562a8edca6402338fb8a9972afd8bd16e42d29d090ddb7dd92f9548c116eef2c9dc89492ef5b525c40633a78a2693f6666a50121e05b205b7efec494e205a516035af5f11eead0a07e9682f88a5ad15780a823b0d844eaabfac38a8650822ab03996f41fee18dfc27c835c7f"}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x10, 0x1, "e787225bce820d0143294ec5"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x70, 0x1, "f15933d7ba021d62ae54b2f59e643a3668cb03e8064e227631a743a7b237b93bf9ec1edb40d03db9a684ea950bb9dc58988e2715600ba6a7d8f154997d9e18869873f010b43f9a1d45e723a6bacb1913ecc708e04e6551d18f6a7daf22dcd1d4143113640eb1dee343f1af2e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "4ddf783ad92c45c1a772f4b7d818a364d42188d8deae03bd73b4983d25517e3bcc74841731a71285836ba613843fc433dfa21524d8e2029c9f48292e3ac05ed13dffe883e2f7feddc148f2798ced17503276f97edef947ec6fc6d3004dfdb9b1477659106a0232d32818e6ae85f8f02a284a8b18ac3a76d6117d05cb38dda7947d959e7c07953592a4ee9b"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x70, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xc2c901f77158e3c4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xbe, 0x1, "89b2a62a68f12020cd0fe0ba44c1fe9b09ff66a6b2bb4dfe6de6e54799fedea8aca85d77ff6e0e4b67bd754fadc9378e3475a01f5bd6385e8fcb354160d529c225786e47a2b7f894af34a43d08a32ddd13a21e9881577b3564d41aa10c46a8e5f498ce6a90e43b272b87a205907b68266509332cbbddfcd56649fc24665a9b29f6c522510325e7e313b0749efe241242155dbe07c737091d29df56a85d82a0d0e14e8f69f27c3071aa5b9107a36f1ca5634fd6276736bb25baeb"}, @NFTA_DATA_VALUE={0x9, 0x1, "10568cfede"}]}]}, {0x1120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x74, 0x6, 0x1, 0x0, "04d674c39a122365e4a1cf2272b2d46bef723f55628f141c03764eca00d1f25426493152bc8106020091af17bd97740850d058f176756fb62c1b4adf39eeb475d0826b382ed9c651f976c5fd9e573497277c07bd61f4d75f3b7fc5371665401f986e2c3f082b904ee11c0978e34a7afc"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x73, 0x6, 0x1, 0x0, "02646c13014a12ca01aaf0b3b166ea4ed126e837483c7829907200b7550f63d907a1b7dee8869736304a9811d5599369bcdc5a5d21481cf065ddefae4042c853f3548453697dfe529ed02954a63f086d89d82755bd54d72693ccce0bbf7d8d568722cdc155fda56704b7bcf1e2ad55"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xec, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x78, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0xa82, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}], {0x14}}, 0x9a88}, 0x1, 0x0, 0x0, 0xc001}, 0x20000806) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, 0x0) syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000040)=0x78) [ 1102.206035][T28161] FAT-fs (loop1): bogus number of reserved sectors [ 1102.247717][T28161] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1102.270124][T28169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0x6) [ 1102.309219][T28161] FAT-fs (loop1): bogus number of reserved sectors [ 1102.330698][T28161] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1102.420669][T28180] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:23:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r2, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x200000000000001, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x5, 0x3}, 0x0, 0x0, &(0x7f0000000080)={0x3, 0xe, 0x1000, 0x2}, &(0x7f00000000c0)=0x100000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xffffffffffffffff}}, 0x10) 00:23:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4c00, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0xfffffff7) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:23:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xc3ffffff}, 0x0) 00:23:12 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000000)={0xff, 0x6}) [ 1103.573504][T28215] FAT-fs (loop1): bogus number of reserved sectors [ 1103.584711][T28218] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1103.596666][T28215] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:12 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x5) ioctl$TIOCSIG(r0, 0x40045436, 0x11) syz_emit_ethernet(0x1b7, &(0x7f0000000040)={@remote, @broadcast, @val={@val={0x9100, 0x2, 0x1}, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x1, 0x6, "f32e33", 0x179, 0x11, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, {[@hopopts={0x3b, 0x3, [], [@calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0x11, [0x1]}}, @padn, @pad1, @enc_lim]}, @srh={0xf0, 0x2, 0x4, 0x1, 0x25, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x88, 0x2, 0x4, 0x1, 0x1, 0x50, 0xbe9, [@local]}, @routing={0x21, 0x2, 0x2, 0x62, 0x0, [@dev={0xfe, 0x80, [], 0x3f}]}, @routing={0x0, 0xc, 0x0, 0x87, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast2}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty]}], {0x4e21, 0x4e20, 0xa1, 0x0, @opaque="92c82624f727dc990e21fa0354fc74e5d8271c74de0263e539b11bd11d8331d837a010842eeb62c5104c20df8f1e83933c7d540944be4d19f9242cc38a99ad91d5bc5c70cc503c1266635057305a08936353bbc5e0aab365d3ed1d5e20029ee37e9e31eeda4a83d814062cb106fadaec28fec588c27fdfd3e2ea158da6a2c4e3d66d05c9b2a599da15d4f91fa7334cdfbcac973979a54c576f"}}}}}}, &(0x7f0000000200)={0x1, 0x3, [0x218, 0x61d, 0x35c, 0xc46]}) 00:23:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 1103.640080][T28215] FAT-fs (loop1): bogus number of reserved sectors [ 1103.649346][T28215] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x5c00, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1103.687748][T28235] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:12 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x4b41, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x4b41, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r4, 0x4b41, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x3, 0x1}, {0x3}}], 0x8) ioctl$TIOCSIG(r4, 0x540b, 0xffffffffffffffff) 00:23:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) ioctl$TIOCSIG(r0, 0x40045436, 0x31) 00:23:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xefffffff}, 0x0) [ 1103.902730][T28265] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1104.020021][T28280] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:15 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{@none}, {@fixed}, {@none}]}) socket$bt_rfcomm(0x1f, 0x3, 0x3) 00:23:15 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$TCSETX(r4, 0x5433, &(0x7f0000000140)={0x40, 0x1009, [0x5, 0x0, 0xa061, 0x8008, 0x1], 0x9}) ioctl$TIOCSIG(r0, 0x40045436, 0x14) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0xffff}, 0x8) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x230000, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0/file0\x00', 0x0, r7) chown(&(0x7f0000000100)='./file0/file0\x00', 0x0, r7) setgid(r7) ioctl$SNDCTL_SEQ_GETINCOUNT(r5, 0x80045105, &(0x7f0000000080)) 00:23:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:23:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xf0ffffff}, 0x0) 00:23:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x44, r3, 0xc694d42685586125, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_VERSION={0x8, 0x2, 0x80}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private}, @GTPA_TID={0xc}, @GTPA_TID={0xc}]}, 0x44}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000480)={r7, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x84) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r9, @ANYBLOB="00000000000000002800120009200100766574687878473095f2d8faf603a1b0e254e809b2119a7091415af81e755ffe90822c030b170141ca"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r9, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x84c, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x7}, @TCA_TCINDEX_POLICE={0x410, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff9}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x1ff, 0x6, 0x8000, 0x8, 0x0, 0xfffff001, 0x4, 0x2, 0xe4, 0x3ff, 0x0, 0x0, 0x101, 0x0, 0x5, 0x3be, 0x800, 0x6, 0x7, 0x0, 0x1, 0x5, 0x9, 0x7, 0x0, 0x400, 0x8, 0x8, 0x7, 0x400, 0x9, 0x9, 0x6, 0x0, 0xffffff8c, 0x3, 0x8c3e, 0x7309, 0x4, 0x3ca, 0xf10, 0x200, 0x0, 0x4, 0x7e4, 0x8, 0x3f3, 0x3e3, 0x6, 0x8, 0x4, 0x1f, 0x4b1, 0x2, 0x8000, 0xeea6, 0x8, 0x794, 0x0, 0x1000, 0x6b66a25c, 0x3ff, 0x1, 0x80000000, 0x1, 0x9, 0x5, 0xf0a, 0x101, 0x9df, 0x5da5, 0x42, 0x6, 0x1, 0x3ae, 0x200, 0xffff, 0x5, 0x200, 0xfff, 0x3, 0x6, 0xffffffe0, 0x101, 0xff, 0x7, 0x808, 0x8, 0x1, 0x8, 0x4, 0x5, 0x8, 0x2, 0x8000, 0x3ff, 0x2e46eaf, 0x0, 0xb235, 0x4, 0x0, 0x8, 0x80, 0x1f, 0x8, 0x7, 0x200, 0xb1, 0xa8, 0x3, 0x7, 0x0, 0x4, 0x0, 0x401, 0x200, 0x8, 0x180, 0x3, 0x1, 0x7fffffff, 0x4, 0x3, 0x52, 0x6, 0xffff8001, 0x5, 0x7, 0x8, 0x8, 0x0, 0x400, 0x1, 0x1c00, 0x8, 0x3, 0x1000000, 0x46, 0xfffffe00, 0x5b95eaa2, 0x53, 0x5, 0x2, 0x0, 0x9, 0x9, 0x855, 0x4c5e6992, 0x0, 0x0, 0x0, 0xd0, 0x6, 0x7fff, 0x8, 0x0, 0x8, 0x2, 0x6, 0xff, 0xffffffff, 0x2, 0x5, 0x2, 0x99ff, 0x7fff, 0x7fff, 0x3, 0x2, 0xb872, 0x3, 0x5, 0x9, 0x200, 0xc69, 0x0, 0x3ff, 0xffff58d3, 0x7ff, 0x7, 0x9, 0x812, 0x0, 0xfff, 0x0, 0x62dd1c5d, 0x7b, 0x8, 0x7, 0xfb5, 0x4, 0x200, 0x81, 0x9, 0x8d, 0x5, 0x6, 0x3, 0x1bd, 0x1, 0x7fff, 0x0, 0x5, 0x2, 0x7, 0x6, 0x1, 0x4, 0x8001, 0x5, 0x6, 0x8, 0x3, 0x1e, 0x1f, 0x2, 0x4, 0x10001, 0x40, 0x5, 0x7ffffffb, 0x9, 0x81, 0x41b1729d, 0x7fff, 0x4, 0x4376, 0x0, 0x5, 0xfffffff8, 0x6a9c, 0xba, 0xffffffff, 0x7, 0x69eeee5b, 0x8, 0x2, 0x5, 0x7, 0x3, 0x16438e0e, 0x8, 0x2, 0x2, 0x9, 0x7, 0x7, 0x200, 0x387, 0x0, 0x1ff, 0x702, 0x5]}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0xa5}, @TCA_TCINDEX_POLICE={0x10, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffff}]}, @TCA_TCINDEX_POLICE={0x410, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x101, 0x4, 0x3f, 0x40, 0x6, 0x0, 0x1, 0x6, 0xf9, 0x0, 0x4, 0x4, 0xffff, 0x81, 0xbb1, 0x7fffffff, 0x80, 0x9, 0x0, 0x73a00000, 0x3, 0x0, 0x0, 0x7, 0x8001, 0x1, 0x3f, 0xa081, 0x3, 0x98, 0xac4, 0x4c, 0xe6, 0x96ea9c0, 0x9, 0xffffffff, 0x6, 0x6d, 0x5, 0x9, 0x3, 0x1, 0x6, 0x7ff, 0x8, 0x5, 0x200, 0x6cf4, 0x87, 0x3, 0x1, 0x735, 0x0, 0xfffffeff, 0x8, 0x9, 0x4, 0xff, 0x800, 0x48, 0x0, 0x1, 0x9, 0x5, 0x2, 0x7, 0x0, 0x0, 0x3ff, 0x6, 0x6, 0x9, 0x8, 0xd7f8, 0x7f, 0x1000, 0x3, 0x9, 0x4, 0x80, 0x8, 0x1, 0xa8c, 0x3ff, 0x56a1, 0x400, 0x7, 0xef4e, 0x3f, 0x1, 0x3, 0x6, 0x3, 0x5, 0xe8b, 0x0, 0x1, 0x60, 0x4, 0x6, 0x4, 0x5d0, 0x20, 0xffffffff, 0x80000001, 0x7, 0xff, 0x81, 0x8, 0x4, 0x5, 0x1f, 0x1, 0x200, 0x1f, 0xd79d, 0x81, 0x0, 0x7, 0x4, 0x0, 0x2, 0xa50, 0xfff, 0x5, 0x0, 0x3, 0xfffffff9, 0x7, 0x8000009, 0x2, 0x80000001, 0x8000, 0x0, 0x6, 0x25, 0x1, 0x4, 0xe37, 0x10001, 0x80, 0x3, 0x800, 0x7, 0x7, 0x40, 0x101, 0x7f, 0x47ebfe4a, 0x6, 0x1, 0xffffff80, 0x6, 0x401, 0x3, 0x9, 0xb153, 0xe4, 0xffffffe1, 0x9, 0x9, 0x9, 0x100, 0xd0, 0x1f, 0x8001, 0xfffffbf3, 0xda, 0x4, 0x2, 0x7, 0x9, 0xffffff80, 0x3, 0x7ff, 0x0, 0x8, 0x7, 0x83a7, 0x100, 0xb292, 0xffffffff, 0xb, 0x5, 0x4, 0x10000, 0xf760, 0x101, 0xfffffffb, 0x100, 0x3, 0x7fffffff, 0x7, 0x2, 0x4, 0x3e58, 0x4, 0x0, 0x4, 0x1, 0x2, 0x8, 0x6, 0xffff171c, 0x7fffffff, 0x0, 0x0, 0x1ff, 0x20, 0x7ff, 0x80000000, 0x1f, 0x2, 0x0, 0xc7, 0x7, 0x6a, 0x3fc, 0x10000, 0x0, 0x9, 0x7, 0x7f, 0x9, 0x0, 0x8, 0x20, 0x5, 0x1f, 0x6, 0x6c55, 0x8, 0x0, 0x0, 0xfffffff8, 0x7, 0x401, 0x10000, 0x6, 0x1684, 0xe2d, 0x4, 0x2, 0x0, 0x5, 0x4, 0x101, 0x3ddcd548, 0x273, 0x7ff, 0x4, 0x7b, 0x0, 0xa9f]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x5cd5}]}}]}, 0x87c}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r9}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004040) ioctl$TIOCSIG(r0, 0x540b, 0x1) [ 1106.609209][T28298] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1106.629592][T28302] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:15 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="0de79168ac63b62fc025d42e2fc7367792ea6c8cdbb6d842cfab1d0b264de3e045677302c6129073a3709d4388c1377a0c1738e4654fee793bb44957f2615cb719385c40611d1ce68542bdfefe467f7d16b35f5e44c69b1229ccf4889160d260c793ec89cce4657ece20a5344c0cbb77b91a143f7d6e5b3ef4d4b71a3eb038465ac64557e0842a3f0515b74a99fd8c1e9e937053f58e83e3d676433cdea289ec95459d7cb01785662831bda66ee9d1f975e7bac2ea55ff9ee5c1b30563f394a1d50217a1446c5d867b8e190b3176f13a23d1a2e239e5828dd719124673e15aa682f14846ffc87ad49255") mlockall(0x1) 00:23:15 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x40c042) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000040)={0x10001, 0x6, @name="8e46ab7fc789e3aa6da982f72b13f31fe181bcf2a1e09c86fa8af360caf7a624"}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, &(0x7f0000000140)) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r6, 0x4b41, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x9d0000, 0x1, 0x3ff, r6, 0x0, &(0x7f00000000c0)={0xa30001, 0x7, [], @string=&(0x7f0000000080)=0x81}}) 00:23:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6800, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:15 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x4b41, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r3, 0x40045436, 0x2a) 00:23:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x10) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040)) [ 1106.788963][T28298] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1106.805941][T28312] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:15 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xc80, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000040)) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:23:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xfcffffff}, 0x0) 00:23:16 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8c080, 0x8a) ioctl$TIOCSIG(r0, 0x540b, 0x1b) 00:23:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6c00, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:16 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x3f) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) [ 1106.978620][T28353] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1107.188647][T28358] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:23:18 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:23:18 executing program 2: ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x1) 00:23:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7400, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xffffa888}, 0x0) 00:23:18 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:23:18 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$jfs(&(0x7f0000000740)='jfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x9) close(r1) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) write$capi20(r1, &(0x7f0000000000)={0x10, 0x6, 0x4, 0x1c4, 0x7, 0x7}, 0x10) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r2, 0x540b, 0x1) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000040)={0x10000, 0x4, 0x3, 0xffffffff, 0x7, 0x6, 0x7}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f00000000c0)=""/62, 0x9ac0}) 00:23:18 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="5ab7d971c6d5dd52bb66", 0xa}], 0x1, 0x1) close(r1) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x79, 0x17, &(0x7f0000000000)="36caa09ca8be16ba3aac3ff2dad6acfb4053c674ed3b8c28d4d3a5e21fab5f536783ebb8dab20a14f717dfb5801957b819025bf4b88349bd2d8ad0a9dd5f09654f6b1bb6576eb4aad4ec362e605ba1469aaf951eb5206eb431f4bda5617702bbb2bc1117d88c7d41fb6203883e2e27661f61209d10e84df93f", &(0x7f0000000080)=""/23, 0xfffffffc, 0x0, 0x36, 0x13, &(0x7f00000000c0)="fd749a8546f655f25f84d285091eb76fc921fc591ba61ed2dcf42b8a7305c97a593e8fa51e9e098e3563bd1cf831005816710ad6e7c4", &(0x7f0000000100)="507295819a5127f7973125b1fafe627e7eb8e6"}, 0x40) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r2, 0x40045436, 0x2) [ 1109.669017][T28400] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:18 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x200, 0x7) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000000)="4344ef733269e9be7e025dd0f986578f1e9820d18ed7514d1467a4fb72ca0a90192ba6006ab695eef51a155c9528fcfde82b67ba4526dcf1762ed14786c669abf941f2a56ddd706336d71343380051d5c366dfc3f5786bface51d87a58d670acbe14ca68350738887d501e6f3441f7b8a4a0b66f078336516bee06efae8259501bb1a98f83b451dcb5bca30c3dcb741654dde1007f38f4a6a8edea2f1b6b9c83be99fc53b972ae54b17ff1414bce31d5fc2cae70afcae41289d83984edee558e653f29", &(0x7f0000000100)=""/200, &(0x7f0000000200)="062605930476c27c4496952ae5d4ca58703cc8990ab62dccbaa9f9d0f3751c4546732c2bdf238fdac31237183502c033a432f906d32fbaf5b4c1ad37242544183aa8fef922ffe75d9d8872cb242896f97e0019f74f294eaceaef3db184549c28e4ce8d3dc4540c5f205e57716bacef6f6e8c1f2e3bb92315539e99a6784041fc51de291050efc89c3339f981", &(0x7f00000002c0)="e4c4facc8f175fe1db0a8b373799ce53533706b488131c7247f44f197c7cd6cae1ca3d7b62bc", 0xc5, r2, 0x4}, 0x38) 00:23:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7a00, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:18 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:23:18 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xb}}]}}]}, 0x3c}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r9, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xb}}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000016c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c160000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="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"], 0x161c}, 0x1, 0x0, 0x0, 0x800}, 0x4) [ 1109.839083][T28408] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1109.928596][T28446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1109.957618][T28446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1110.000052][T28446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1110.017227][T28462] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:23:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:23:19 executing program 2: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000100)=0x3) close(r3) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) open_tree(r2, &(0x7f0000000040)='./file0\x00', 0x98001) r4 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x2, 0x80102) ioctl$SNDCTL_TMR_TEMPO(r4, 0xc0045405, &(0x7f0000000240)=0x159) ioctl$TIOCSIG(r1, 0x540b, 0x1) ioctl$TCSETXF(r1, 0x5434, &(0x7f0000000000)={0x20, 0x80, [0x1, 0x5b3, 0x0, 0xf801], 0xff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) 00:23:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xffffff7f}, 0x0) 00:23:19 executing program 4: mq_open(&(0x7f0000000000)='$+.($%-\x00', 0x80, 0x101, &(0x7f0000000040)={0x10000, 0x0, 0xeb10, 0x2}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:23:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc202, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:19 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000100)=0x1) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000000)="b75ef5b025a83ee3f9f1ba27bcfe831b7b2cfe05f45110a49fc8735dca3367cea2e697167f1b71b9e6659076a7e2c6465fb752134d9e50c5a59ce403224058d8ed6bf8e89bca9f0b2483c6911d90d4bf126251865009c4ef451d505fc916a45e664aed7f50c31d23c737dbe44d069b2654f016abe1ed60a6f5e87d9d518e93f81bc538def6a2561eb1390901ce987f9b1a87e66a61dd42a2dde5b0048c9dc32bebd8ee718f514b87f53e82e0b675fb114dd9f4ad78d9c001a8a9cc4cae308e04ff0dd7e876ec547248202c17b80182cd6e19e678fdd591d699545f9d991e2eb672220bb49861175c5dd7bd9b54b6d1cdec604bbcd6af97da") ioctl$TIOCSIG(r2, 0x40045436, 0x2) 00:23:20 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:23:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x8}, 0x1) [ 1110.928790][T28485] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:20 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xbe, 0xfe, 0xcd, 0x40, 0x4348, 0x5523, 0xfcfd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfb, 0xd, 0xf6}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x5c8, 0x249000) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="0000d2000000c992fc56a5ba9eb1c3c564a75a8e0f898a88adf57672003b9ce4bb5c102a1ecbc24ee52470180c2554e6610ff55daae96fc7217d385507f1501e7b8a6a33cabe927c3656bc3b09a2a06f116582e87d44a5f36f259eaaf10946d9c5dbfbeda9394a49a1c7a433f53933321c2acb09b6b72f9fdfe35ecdab8a2ca550b84ee6eed5d261d6bf836230253eded3f24d3293111873488bd8d5fe2d75bd17e6847075b5f417218d00000000b13a07b0913da7a37a5bdc1b396c77f6b2941739b8acdcf58f687b59aa455be64546625cbe9d94d03a05311382a4d803ed9e791b015fd21599b99a3756e743b217"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) accept4(r2, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80, 0xc0800) 00:23:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc801, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x4b41, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x10000000000001fc, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000080)={{0x2, 0x1, 0x2, 0x4, 'syz1\x00', 0xffffffff}, 0x1, 0x2, 0xab7, r4, 0x8, 0x80000000, 'syz1\x00', &(0x7f0000000040)=['}\'^].\x00', '#\x00', '/\x00', '/}++/-\xe0\xa1}Y&\x00', '\x00', '{\\\',\x00', '\x00', '&@\'@\xe3\a[&*([y,k+})&[+#}\x01G$'], 0x36, [], [0x4bb, 0x3, 0xb82, 0x401]}) ioctl$TIOCSIG(r0, 0x540b, 0x1) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000001c0)=0x8000) [ 1111.126110][T28493] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xffffff9e}, 0x0) [ 1111.242612][T28529] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1111.390624][T28538] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1111.414182][ T5] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1111.844141][ T5] usb 1-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 1111.853399][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.862252][ T5] usb 1-1: config 0 descriptor?? [ 1111.905065][ T5] ch341 1-1:0.0: ch341-uart converter detected [ 1112.344036][ T5] usb 1-1: failed to send control message: -71 [ 1112.350323][ T5] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1112.358700][ T5] usb 1-1: USB disconnect, device number 22 [ 1112.366784][ T5] ch341 1-1:0.0: device disconnected 00:23:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:23:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:23:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x14, 0x4, 0x8, 0xf1a}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r2}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r2, 0x3e6, 0x10}, 0xc) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:23:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc901, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xffffffc3}, 0x0) 00:23:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20000, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@get={0x118, 0x13, 0x10, 0x70bd25, 0x25dfdbff, {{'rfc4106(gcm(aes))\x00'}, [], [], 0x2000, 0x2c00}, [{0x8, 0x1, 0x909}, {0x8, 0x1, 0x4743}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0xffffffff}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x7ff}, {0x8, 0x1, 0x7}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x4801) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) 00:23:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="1107b0bdc356fdbe7be204"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6d785bc0a65e3ca0}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 00:23:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040)) 00:23:21 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) r3 = fsmount(r2, 0x0, 0x8) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000000)) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:23:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xcd26, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xffffffef}, 0x0) 00:23:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:23:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:23:24 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000000)={0x0, 0x2, @raw_data=[0x18c, 0x6, 0x1, 0xffffff80, 0x6, 0x1, 0x9, 0x8, 0x3, 0x4, 0x3ff, 0x1, 0x5, 0x101, 0x5, 0x4bb]}) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:23:24 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) open_by_handle_at(r0, &(0x7f0000000000)={0xfd, 0x9, "653c92afe7b7d5c66dcbad9761bf90b8e4cac36c7fe32d3607c4994afbbc7aa076daf04038eaf52b9e8d72309f107d0476e313f7a8646e404324837da03396e632577618706d9fc00a20fc0d507fe663b765d20592ba7efb6d52def23b457bec496ae3b58df571c77a0c71ec1682d0685314f0336a29fcca42632c99e6bf5bbff6a0de5a52266c8bcccfbb2199abac5e58f8c6a759f99f58a65474ac19efe0b8c1d18cc59ba5eb723aa221eda0bafee41539594fa96d9a43af1a05ec7f35f0664c2b0a0d3a4297acd589ce1799195f81fb61205290b4a78ccad63650985ac390000c559df7f5331d22b955ec59ffb18b2737b25444"}, 0x3ad001) 00:23:24 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x9}, 0xa) 00:23:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xd226, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xfffffff0}, 0x0) 00:23:24 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'batadv0\x00', 0x9, 0x1}) 00:23:24 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x3c) [ 1115.634437][T28678] __nla_validate_parse: 4 callbacks suppressed [ 1115.634446][T28678] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xedc0, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:24 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:23:24 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v1={0x1000000, [{0x8, 0x8}]}, 0xc, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:23:24 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000140)=0x9, 0x4) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000040)) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) [ 1115.798254][T28689] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:23:27 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:23:27 executing program 0: ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2) 00:23:27 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x40) 00:23:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xf903, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xfffffffc}, 0x0) [ 1118.726328][T28741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:27 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:23:27 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x1, 0x200, 0xffff4a3c, 0x0, 0x2, "c8d6d340b369a639e6b46091833f7b1bbe6e2f", 0x4, 0x10001}) 00:23:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xff00, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:27 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x1fe}, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x400000, 0x161) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getpeername$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r5, 0x4b41, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f00000000c0)={0x0, 0x0, 0x3ff}) ioctl$TIOCSIG(r3, 0x540b, 0x2) 00:23:27 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x33) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) 00:23:28 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x1000000000110) [ 1118.972449][T28754] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:30 executing program 0: socket$kcm(0x29, 0x2, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r1 = signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r1, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x4}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x9, 0x4, 0x9}, &(0x7f0000000100)=0x8000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x3f}}, 0x10) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r2, 0x40045436, 0x2) 00:23:30 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00') ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:23:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xff0f, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x40030000000000}, 0x0) 00:23:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r4}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r5, 0x540b, 0x0) 00:23:30 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$CHAR_RAW_GETSIZE64(r3, 0x80081272, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='io\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x16) 00:23:30 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x30) 00:23:30 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) [ 1121.792645][T28822] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:30 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) splice(r0, 0x0, r1, 0x0, 0x9, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r2, 0x40045436, 0x14) 00:23:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xe0000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0xfd, 0xa3, 0x1}, 0x10) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2000c081) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSSOFTCAR(r4, 0x4b41, 0x0) ioctl$TIOCSIG(r4, 0x40045436, 0x8000000000000e) [ 1121.987685][T28833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:31 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x70}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x101801, 0x0) sendto$llc(r0, &(0x7f0000000180)="d184984de70040e88947b499a97264a326111d1f2b31178314a0ee3037e4b200208831ddf10b1d3905315f116ee21ce4c3f2dc3a2499a393cec06bf4d9d09e19463ba8c76af0c982e165bf8301138ef1a45e56e329de538f2d31258adf8e2d977a426791803ce7e92f74930393b5e47bf89340d22e22b4a7029a5a8ccdbe9b6adf7deb76e8018d41ada04f54b91d3539a689", 0x92, 0x4, &(0x7f0000000240)={0x1a, 0x103, 0x8c, 0x1, 0x80, 0x3, @remote}, 0x10) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20800, 0x0) ioctl$TIOCSIG(r1, 0x540b, 0x2000001) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) sendto$netrom(r2, &(0x7f0000000040)="892e2020d84ac92abc9083ab7beb0b4c1f7496416268ef0aa5849024ddca431740c4a533db48e292e638c8dd01ddc3ff7f4ebd33442ee4019974309fd13530d3afca8fe52cf1d249430f659c38b9c117", 0x50, 0x8010, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @null, @bcast, @bcast, @default]}, 0x48) 00:23:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x100000000000000}, 0x0) 00:23:31 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x155200, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000200)={0x4, 0x8000}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$SNDCTL_TMR_START(r2, 0x5402) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x6, 0x7f}, 0x8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast2}, r6, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x5, @ipv4={[], [], @private=0xa010100}, 0x5}, {0xa, 0x4e23, 0x0, @mcast1, 0x3ff}, r6, 0xff}}, 0x48) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r7, 0x40045436, 0x14) 00:23:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x11, @multicast1=0xe0000005}]}}}]}, 0x3c}}, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r1, 0x540b, 0x1) [ 1122.194193][T28869] FAT-fs (loop1): bogus number of reserved sectors [ 1122.219906][T28869] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1122.304662][T28886] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1122.335584][T28869] FAT-fs (loop1): bogus number of reserved sectors [ 1122.342359][T28869] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1122.370021][T28890] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 1122.425488][T28890] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 1122.455867][T28893] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:33 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x11) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7700000000000000b7d9baf2720ddf8775f85d987416a03c40840da9e47db08b2db0301f38c3e75faa7554804423003b362fbcb3adae0e14e20026ca43a3eec483ccbee4054e5f01b92bb0bd6a369ed082470c6e51f64d3552e55ed0ec4ae98fb612be94b8c3abc707a8bdf085896125aba1992cef601dd8138d86467dd62c8d"], 0x100000) 00:23:33 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:23:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x200000000000000}, 0x0) 00:23:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0x0, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:23:33 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f0000000140)={0x3ff, 0x3, 0xfff, 0x98, 0x7f, 0x7, 0x8001}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) splice(r3, 0x0, r2, 0x0, 0x10001, 0x1) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x3, 0x9, 0x82d, 0x1, 0x7}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(r6, 0x551f) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000000)={0x0, 0x1}) 00:23:33 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x100, 0x70bd2a, 0x25dfdbff, {0x1, 0x2, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040090}, 0x4840) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r1, 0x540b, 0x1) [ 1124.827789][T28925] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1124.848100][T28928] FAT-fs (loop1): bogus number of reserved sectors [ 1124.863722][T28928] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:33 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x6, 0xff, 0x3}) 00:23:33 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x4b41, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000000)={0xd9, 0xe, &(0x7f0000000040)}) ioctl$TIOCSIG(r0, 0x40045436, 0x2) [ 1124.938544][T28935] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1124.952899][T28928] FAT-fs (loop1): bogus number of reserved sectors [ 1124.959469][T28928] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2040000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:34 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000140)="a0a2831b90bd965d369eb1521f6f782fbb80f5c43dab3bd355a0b7d54b08590e7ab5f2d430aa43cdd96a8365181c3aa8af25364d9c1190c7e087c3b044a45c731041afb5c3c06c1df8ea1aa81b0365b1ea618932acad3b46671a9218d8654d88c372174d5d2af7dd58b334741351691705a09dc9e48aefa00d29488aadc526fa7621b2cff0cce64637cf756a658c97e19cf1e47f1248") r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001300)={0x3, &(0x7f0000000080)=[{0x7, 0x1, 0x7f, 0x3}, {0x3, 0x2, 0x4, 0xba}, {0x1, 0x0, 0x6, 0x8}]}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000001340)={0x7, 0x7, 0x1}, &(0x7f0000001380)=0x28) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$cont(0x9, r2, 0x4000000000000000, 0x4) r4 = fcntl$getown(r0, 0x9) waitid(0x2, r4, &(0x7f0000000000), 0x80000000, &(0x7f0000000200)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r5, 0x4b41, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x10008045) process_vm_writev(r4, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/55, 0x37}, {&(0x7f00000000c0)=""/1, 0x1}], 0x3, &(0x7f0000001800), 0x0, 0x0) 00:23:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x300000000000000}, 0x0) 00:23:34 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x13) r1 = socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000100)={'filter\x00', 0x0, 0x3, 0x38, [], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=""/56}, &(0x7f0000000180)=0x78) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000000)={@local, @local}, &(0x7f0000000040)=0xc) 00:23:34 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x10440, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x4b41, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$rxrpc(0x21, 0x2, 0xa) ioctl$TIOCSSOFTCAR(r3, 0x4b41, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x100000000000036) 00:23:34 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000001c0)={0x40000000, 0x6, "59c9c57c892e5d55b58ddd43d0b21e435015fb5b0a69d04444a9e5be792acde6", 0x0, 0x10000, 0x8, 0x9, 0xd0f, 0x400, 0x5e5, 0x9a58, [0x3ff, 0x7, 0x3f, 0x5]}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r2, 0x40045436, 0x14) 00:23:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newlink={0x11, 0x11, 0x40d, 0x0, 0x0, {0x7}}, 0x20}, 0x1, 0x800000000000000}, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r1, 0x40045436, 0x2) [ 1125.179727][T28975] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1125.347664][T28983] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0x0, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:23:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:36 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x1, @win={{0x1, 0x8, 0x2, 0xfca5}, 0xa, 0x4, &(0x7f0000000080)={{0x1, 0x7, 0x80000000}}, 0x2, &(0x7f00000000c0)="7ab1a812e496717a172e3a1cf7689cce8367e76cfc7bad4ed4a9035e66f01ae51fc0f63268ac3d3879000b8d4161f95c4599a9b6", 0x8}}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r1, 0x40045436, 0x14) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000000)=0x5, 0x4) 00:23:36 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x4b41, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000040)="8d24bc611760d020974ccde7d60abad3499b24339b9a5532b165bf14bfe55079c8b78c6e22f082343d977c321d377b08fc89eea75ce24a6471724e88b58cf4cd4e6294621dd8a17e219269824e2029db4344692466044b8e7b7cc8013c6476fa382451f67c760c39b1c2286250ed7f07e6") r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x4b41, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x2b) 00:23:36 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000000)) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x10001, 0x400080) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x6, 0x9, 0x4, 0x0, 0x31}) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000040)=0xc8) 00:23:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x400000000000000}, 0x0) [ 1127.897603][T29024] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1127.910384][T29025] FAT-fs (loop1): bogus number of reserved sectors [ 1127.918629][T29025] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:37 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) [ 1127.983697][T29025] FAT-fs (loop1): bogus number of reserved sectors [ 1127.992885][T29025] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:37 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSIG(r1, 0x40045436, 0x1d) 00:23:37 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r2, 0x405, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r6, @ANYBLOB="00000008ffffffff01200000090001006866736300000001010002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xb}}]}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="f4308a7056c2"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0101000000000000000001000000440001000c00070000000000960000000c0006006c626c63720000000800b2030a69700008000800000000000800090000000000080001000a000000080005"], 0x58}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, r8, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xec}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1e}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6b2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa3e9495e03173f8}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe982}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xcc}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x8}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:23:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1128.058882][T29034] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:37 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x4b41, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$TIOCCBRK(r1, 0x5428) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0x101, 0x1, 0x7, 0x5}) ioctl$TIOCSIG(r0, 0x540b, 0x1) [ 1128.145369][T29060] FAT-fs (loop1): bogus number of reserved sectors [ 1128.152042][T29060] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1128.168967][T29058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:23:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x500000000000000}, 0x0) [ 1128.189281][T29058] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1128.212061][T29060] FAT-fs (loop1): bogus number of reserved sectors [ 1128.226256][T29058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1128.227111][T29060] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1128.244397][T29073] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1128.307497][T29077] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1128.413030][T29083] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0x0, &(0x7f0000000000)=0x10001, 0x10) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:23:39 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:23:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x540b, 0x1) 00:23:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x5000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:39 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) time(&(0x7f0000000000)) 00:23:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x600000000000000}, 0x0) [ 1130.906417][T29106] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1130.930648][T29110] FAT-fs (loop1): bogus number of reserved sectors [ 1130.943945][T29110] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x98001, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={r5, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)={r6, 0x5, 0x1a, "ba60d4a70d68ceb2b76d44385f0d8ff9f11e7f733f128cda9912"}, 0x22) 00:23:40 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = socket(0x1, 0xa, 0x2005) ioctl$TCXONC(r0, 0x540a, 0xfcd4ce2aff3c5e09) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x89a500, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000340)) r3 = socket(0xa, 0x800, 0x8) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000208030000000000000000000c00000106000240880800000c00047308000240000065a40c00048008000240000000020900010073797a3000000000"], 0x40}, 0x1, 0x0, 0x0, 0x10014}, 0x4004) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="aadda40070c366252300"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x51) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000000480)={0x0, 0x8}) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$KEYCTL_MOVE(0x1e, r7, r6, 0xfffffffffffffffd, 0x1) keyctl$clear(0x7, r7) 00:23:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_RELDISP(r0, 0x5605) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x4b41, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x4b41, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r4, 0x4b41, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x4b41, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x2c) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000100)="4fe1e62d90533c92c9643ceb2c309e3c9c7e6c88fccce9fe2376bbdca7303b2370f2d03fea3df586a93701ae1d32164985660f6090dd4c3f978ee63dbc05b409d32d905449c78ed754fe91b1b601aef52e403ca61e9e6755c26016d215dd2216be3a2f8dc58e0807cb9b8544f236a1", 0x6f) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r9, 0x0, 0x2, 0x4}}, 0x20) [ 1131.022868][T29110] FAT-fs (loop1): bogus number of reserved sectors [ 1131.031616][T29110] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1131.045718][T29118] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x800000000000000}, 0x0) 00:23:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) ioctl$TIOCSIG(r0, 0x540b, 0x1) [ 1131.170955][T29148] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1131.228507][T29155] FAT-fs (loop1): bogus number of reserved sectors [ 1131.239978][T29155] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1131.267570][T29155] FAT-fs (loop1): bogus number of reserved sectors [ 1131.281711][T29155] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1131.308161][T29154] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:43 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, 0x0, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:23:43 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TIOCSIG(r0, 0x40045436, 0x20000002d) 00:23:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x1) 00:23:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x200, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r2}) 00:23:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x6040000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x900000000000000}, 0x0) [ 1133.966627][T29198] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x540b, 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x90000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000040)=0x7) r2 = socket(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x8, 0x6}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="03feb2a9", @ANYRES16=r4, @ANYBLOB="000325bd7000ffdbdf250300000008000800ac1414bb050004000100000006000a004e23000014000700fe80000000000000000000000000001b05000400010000001400070000000000000000000000ffffac14141414000900fe880000000000000000000000000101060001004e210000"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x90) 00:23:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000000)) syncfs(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:23:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x7000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1134.113848][T29211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:43 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)={0x12, 0x7, 0x2, {{0x5, '\xb4},\x17]'}, 0x3}}, 0x12) ioctl$TIOCSIG(r0, 0x540b, 0xe) 00:23:43 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket(0xa, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r2, 0x4b41, 0x0) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000100)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r3, 0x4b41, 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x41) ptrace$cont(0x7, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) splice(r5, 0x0, r6, 0x0, 0x10000, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r4, &(0x7f0000000140)={r6, r0, 0x7}) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000080)) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:23:43 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x210100, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8) ioctl$TIOCSIG(r1, 0x40045436, 0x839) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x400800, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000080)) [ 1134.214603][T29238] FAT-fs (loop1): bogus number of reserved sectors [ 1134.234237][T29238] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1134.293530][T29238] FAT-fs (loop1): bogus number of reserved sectors [ 1134.301344][T29238] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000200), 0x4) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x5, &(0x7f00000003c0)=0x0) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/143, 0x8f) r6 = accept4$inet(r3, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10, 0x80800) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) write$binfmt_elf64(r4, 0x0, 0x78) io_submit(r5, 0x2, &(0x7f0000000740)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x2c5}, &(0x7f0000000700)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffff05}]) r7 = dup2(r1, 0xffffffffffffffff) ioctl$RTC_UIE_OFF(r7, 0x7004) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSIG(r0, 0x540b, 0x1) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="5c000000a4195539fa6b9ce788edd05d6c3d2fcb42d1ccf5d4439c05901f1b26cb7f89445bad507204903a3e6eb17a5a470dad6ac065344163d7d761c64843516a7a67701162aa014992fbc333e486b66ce40e27e253d2428261af2143296ba6b987520b4df7f48bd521dac0c422cde9e59928a47d92a22137b27636f239d3ff4639b22952b36ae41fe73a542f9e2f8f225d7fa28828ff9dfc9a0de1cae6ea020ff4980fd8aed83e2d0000512db41923e54d1beea97d5cdb1575dd90ec25d0dfdc989e3eaf6343f42c7a55c6b5734ff53740d1ac06e5d3dbf23cb01ab2", @ANYRES16=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x840) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x2cc000) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000380)) 00:23:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xa00000000000000}, 0x0) 00:23:44 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x800, 0x0) fstat(r0, &(0x7f0000000040)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r1, 0x40045436, 0x2) ioctl$TCSETX(r1, 0x5433, &(0x7f00000000c0)={0xff, 0x2, [0x9, 0x8, 0xfff7, 0x1000, 0xfff8], 0x29}) 00:23:44 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:23:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, 0x0, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:23:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:44 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) ioctl$KDDELIO(r0, 0x4b35, 0x101) [ 1135.240744][T29271] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1135.257423][T29274] FAT-fs (loop1): bogus number of reserved sectors [ 1135.266337][T29274] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockname$qrtr(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) 00:23:44 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x24, 0x4, 0x1, 0x4c, r1}, 0x40) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r3, 0x40045436, 0x1b) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r0}) [ 1135.345313][T29274] FAT-fs (loop1): bogus number of reserved sectors [ 1135.352395][T29274] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1135.360043][T29281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x8, 0x0, [{0x6c0, 0x0, 0x1}, {0x2f7, 0x0, 0x1}, {0x8d2, 0x0, 0xfff}, {0x8d5, 0x0, 0x6}, {0x3a6, 0x0, 0x9}, {0x2d8, 0x0, 0x2}, {0x816, 0x0, 0x6}, {0x27e, 0x0, 0x38781bd}]}) 00:23:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x9000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xc00000000000000}, 0x0) 00:23:44 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x141f01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x1, 0x6}) 00:23:44 executing program 2: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r5, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xb}}]}}]}, 0x3c}}, 0x0) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0xffffffffffffffff, r7) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0xff00, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x2b, r5, r7}, {0x3ecc, 0x100000001, 0x0, 0x3, 0x80000000, 0x2, 0x1, 0x2}, {0x6, 0x8, 0x6, 0x800}, 0x5, 0x6e6bbf, 0x0, 0x1, 0x2, 0x1}, {{@in=@multicast2, 0x4d6, 0x3c}, 0x2, @in=@loopback, 0x0, 0x2, 0x3, 0x1, 0x9, 0x2, 0x3}}, 0xe8) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r8, 0x540b, 0x1) r9 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000000280)=0x4, 0x4) 00:23:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x7, 0x0, 0x8001, 0x1, 0x5ff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000000)) 00:23:44 executing program 4: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x44482) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x9) [ 1135.567600][T29322] FAT-fs (loop1): bogus number of reserved sectors [ 1135.580829][T29322] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1135.587301][T29326] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1135.641239][T29322] FAT-fs (loop1): bogus number of reserved sectors [ 1135.656961][T29322] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1135.659127][T29327] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1135.758148][T29338] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1135.767888][T29332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:47 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, 0x0, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r6, 0x540b, 0x0) 00:23:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:47 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x2f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000000)={0x2, 0xe1cdff4add60189b, 0x3, 0x0, 0x80}) 00:23:47 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea2bdc9c1587a050000000000000042e33089754c8107c3cd4623dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb7bb50ec93c152fa483198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b0674cc5c1e298a16324fe27da2a908ba9ff3c009d36d691cc7911219a2fd5d", 0xc0, 0xfffffffffffffffe) ioctl$TIOCSIG(r0, 0x40045436, 0x35) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r1}, &(0x7f00000013c0)=""/265, 0x109, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$instantiate(0xc, r1, &(0x7f0000000000)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', '*', 0x20, 0x8001}, 0x2c, 0xfffffffffffffffe) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x10000000001) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x101100, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r4 = socket(0xa, 0x2, 0x0) r5 = socket$inet(0x2, 0x4, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f00000001c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0xffffffffffffffff, r6) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0/file0\x00', 0x0, r8) chown(&(0x7f0000000100)='./file0/file0\x00', 0x0, r8) chown(&(0x7f0000000140)='./file0\x00', r6, r8) 00:23:47 executing program 2: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000030c0)=""/263, 0x107}, {&(0x7f00000000c0)=""/82, 0x52}, {&(0x7f0000000900)=""/217, 0xd9}, {&(0x7f0000000c40)=""/196, 0xc4}], 0x4}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000d40)=""/84, 0x54}, {&(0x7f0000000e00)=""/113, 0x71}], 0x2}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000700)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/115, 0x2ce}, {&(0x7f0000000380)=""/89, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/18, 0xa}, {&(0x7f0000000ec0)=""/153, 0x60}, {&(0x7f0000001fc0)=""/236, 0x600}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x40000df, 0x0, &(0x7f0000000340)={0x77359400}) 00:23:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xf00000000000000}, 0x0) [ 1138.270966][T29378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:47 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) ioctl$TIOCSIG(r0, 0x40045436, 0x4) [ 1138.321122][T29385] FAT-fs (loop1): bogus number of reserved sectors [ 1138.339960][T29385] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_subtree(r1, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r2, 0x40045436, 0x14) 00:23:47 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = accept(r1, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0x2, 0x0, 0x27, r2}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r3, 0x40045436, 0x2) [ 1138.399425][T29385] FAT-fs (loop1): bogus number of reserved sectors [ 1138.410217][T29385] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1138.411909][T29407] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xb000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:47 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 00:23:47 executing program 2: [ 1138.531528][T29420] FAT-fs (loop1): bogus number of reserved sectors [ 1138.538551][T29420] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1138.582234][T29420] FAT-fs (loop1): bogus number of reserved sectors [ 1138.592123][T29420] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:48 executing program 0: 00:23:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x1000000000000000}, 0x0) 00:23:48 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:23:48 executing program 2: 00:23:48 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x0) 00:23:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xc000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:48 executing program 0: 00:23:48 executing program 2: 00:23:48 executing program 0: [ 1139.533910][T29454] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1139.541868][T29452] FAT-fs (loop1): bogus number of reserved sectors [ 1139.553574][T29452] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:48 executing program 2: 00:23:48 executing program 0: 00:23:48 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}, {&(0x7f0000000300)="4376e4bb07dbc87d4a15c30bec1227cd6e70ef02a286009dd6871e7cd5fdc070c25ae191ea0c6ab26966e44f23c4c5ab364d825dbe650c7bb52c7190cfad157433176de0291fa20df5aef5d9e26854713657ab6e0d0fd1b0fd76d81595beb43124cae2e0072f1aae60fa31b40d1b860acd3c8c6bf2f72c3c591a9481909ef6bca29dff7122a9a8323535e479029c1542a23aaafad77f4deb9c4d58fc576cc7d777f949f97570792d5299f841e8b8d2e4be624e579f873180df9343df530a31", 0xbf}, {&(0x7f0000000400)="ac08192ea8f067f77cd24941825fae9c5fdab9c0ae631eb00e60f965b0b8ff791e5c3bed2a47dde950c0ea60b15c00ca3f513b151cc4e7adced6e308f1af", 0x3e}], 0x3, 0x1) close(r1) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x3, 0xd76, 0x3}}, 0x28) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x1b) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x8000) r3 = socket(0x1e, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) accept4$x25(r1, 0x0, &(0x7f00000001c0), 0xc0800) ioctl$TIOCSSOFTCAR(r2, 0x4b41, 0x0) ioctl$TIOCEXCL(r2, 0x540c) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4a2402, 0x0) sendto$inet6(r4, &(0x7f0000000200)="14a2425b8fd885a8bfd39d4efeaddb3c3f1fac3a2b6de0f5e83d44a120def4d9e3d08c5f5ae09773e4091c6a2fdc809375a891a593124f17ad8e08c76ab3401f49ac074df5270b130d02501f3b27bb4d80afaec70d4fec8e3c0ad93f4a1961daf0ad6c487feaf336d34f973ab6d50ecf111ba7b833032554b5ba11bb12c036f9d903ac55798dfb784169a60cd3618e6670c2ccbfb3da805d56f97cb2179f7b0153262c3c258839e6fa8467", 0xab, 0x44800, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @ipv4={[], [], @local}, 0x3e88}, 0x1c) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000002c0)={r5, 0x43}, 0x8) [ 1139.617961][T29452] FAT-fs (loop1): bogus number of reserved sectors [ 1139.626884][T29452] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:48 executing program 0: [ 1139.698827][T29458] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x3f00000000000000}, 0x0) 00:23:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xd000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:48 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)=""/229, 0xe5) [ 1139.843297][T29493] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1139.871275][T29492] FAT-fs (loop1): bogus number of reserved sectors [ 1139.891660][T29492] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1139.942119][T29492] FAT-fs (loop1): bogus number of reserved sectors [ 1139.949054][T29492] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1139.971743][T29500] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:50 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x0) 00:23:50 executing program 2: 00:23:50 executing program 0: 00:23:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xe000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x4000000000000000}, 0x0) 00:23:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000400)={0x1, 0x8}, 0x8) r3 = dup2(r0, r1) write$sndseq(r3, &(0x7f0000000000)=[{0x4, 0x40, 0x3, 0x4, @time={0xbfbf, 0x52a5efcd}, {0x0, 0xff}, {0x9e, 0x4}, @time=@time={0x296, 0x19}}, {0x0, 0x7e, 0x1, 0x2, @tick=0x480000, {0x4, 0x20}, {0x7, 0xc0}, @raw8={"6115dac0c7cab2cb42f28e56"}}, {0xe6, 0x94, 0xd6, 0x0, @time={0xffffffff, 0x8001}, {0x0, 0x9}, {0x63, 0x80}, @control={0x2, 0x20, 0x4}}, {0x1, 0x1, 0xf7, 0x2, @tick=0x4, {0x9, 0x64}, {0x1, 0x8}, @note={0x0, 0x8, 0x1, 0x0, 0x1}}, {0x1, 0x81, 0x80, 0x40, @tick=0x33f6, {0x1f, 0x1}, {0xff, 0x1}, @raw8={"8913872ba3cdcd1c611fa205"}}], 0x8c) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x100000000005, 0x1b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r7}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000440)={r7}) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) r9 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x8, 0x602c02) ioctl$vim2m_VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000300)={0x2, @win={{0x10001, 0x6, 0x7, 0x32a}, 0x3, 0xfffffff8, &(0x7f0000000200)={{0x8001, 0x3, 0x8, 0xeb}}, 0x58, &(0x7f0000000240)="34414a4321f6a46ec254d2830203848c0000000000000095c4d67caf7d6de127f81ace25e9372667e2829a65399ce1b60a699ae70f48c8eec6b858d3d99e7408fd27c6546c88191c5734dbdb3ce1db5319bac3f329945f0149d2500a37e61cb8e7fb7d06c03fe89f562242c29fffa8fd49934846c8c19c9de10373a2", 0x6}}) ioctl$TIOCSIG(r8, 0x40045436, 0x14) mq_timedsend(r3, &(0x7f00000000c0)="9b088a2cc836f7a52a5eb25a7ec328068a54755b5ce517c9bc3a3fe785fbe2cfb67ffb00a35554c2efad8855723399d5cae2fc77c0d98aab18da273b80161cfcdfe81cb3f3a9e7d30501f47956ef39861d82b16811f15b27d7fcc67dfb1f001b75162887d6c7359d7b25049110a029fa172243e244529b77215febdb6d9b85f0c636f4c3bfa93234725b09b2db1d952bd94537d92c", 0x95, 0x3, &(0x7f0000000180)) 00:23:50 executing program 2: 00:23:50 executing program 0: [ 1141.680133][T29532] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1141.703936][T29534] FAT-fs (loop1): bogus number of reserved sectors 00:23:50 executing program 2: 00:23:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xf000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1141.703943][T29534] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1141.746542][T29534] FAT-fs (loop1): bogus number of reserved sectors [ 1141.746551][T29534] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:50 executing program 0: [ 1141.809921][T29540] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:50 executing program 2: [ 1141.867692][T29558] FAT-fs (loop1): bogus number of reserved sectors [ 1141.881053][T29558] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x10000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:53 executing program 4: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r1, 0x40045436, 0x14) 00:23:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x6000000000000000}, 0x0) 00:23:53 executing program 0: 00:23:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x801, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffe9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)='2', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={r5}) setsockopt$inet_int(r4, 0x0, 0xcb, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(0xffffffffffffffff, 0x540b, 0x0) 00:23:53 executing program 2: 00:23:53 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x4b41, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000000)) 00:23:53 executing program 0: 00:23:53 executing program 2: [ 1144.756600][T29591] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1144.762017][T29588] FAT-fs (loop1): bogus number of reserved sectors 00:23:53 executing program 0: 00:23:53 executing program 0: [ 1144.824139][T29588] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:53 executing program 0: [ 1144.922536][T29588] FAT-fs (loop1): bogus number of reserved sectors [ 1144.932845][T29588] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1144.943470][T29595] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x11000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:54 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r2 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x20000) ioctl$CHAR_RAW_ALIGNOFF(r2, 0x127a, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x404200, 0x0) 00:23:54 executing program 2: [ 1145.073152][T29629] FAT-fs (loop1): bogus number of reserved sectors [ 1145.084381][T29629] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1145.163745][T29629] FAT-fs (loop1): bogus number of reserved sectors [ 1145.173000][T29629] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x12000000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:56 executing program 0: 00:23:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x6558000000000000}, 0x0) 00:23:56 executing program 2: 00:23:56 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x14) 00:23:56 executing program 3: [ 1147.772922][T29649] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1147.808982][T29653] FAT-fs (loop1): bogus number of reserved sectors 00:23:56 executing program 0: 00:23:56 executing program 2: 00:23:56 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x14) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x82, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000340)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x200, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="4bd533377d4fb2316a2f924d2819f0760fba1dfc49e5333d80dbd9bf6853d0b8c7edd8992914e75396a26571d46a9d642b3411adb9f894fc078f8a9b4dd5cf19d5f4794f988e707ed9739d2c9df439eb7689ccf5dcfca2899dd44614ea41785c040db9fc1bd34e39dc8cb9007a32e366e6ecfff66cc55b3e", &(0x7f0000000080)=""/242, &(0x7f0000000180)="52108cc749f097a77ce8e947849590b45c85cf176d", &(0x7f00000001c0)="57368ee1a97a2784c3a02cb3443e4d8ae7351836176bd0428e4d6ac4c3da657e2dfe5880ca48951f58368f4affadd3348ca64ae8110434e90e4f2212d426a74dc820dd368f619d3302d8ad9b65c9a04e86909775cfc473fbfc2c47eb338fdfab47faba91b606f21e5881bb39ed1b48baabb994bbd0601a593c091c6acad51b5664ca7389cbd9", 0x401, r2, 0x4}, 0x38) [ 1147.819679][T29653] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:56 executing program 3: 00:23:56 executing program 0: 00:23:56 executing program 3: [ 1147.889593][T29653] FAT-fs (loop1): bogus number of reserved sectors [ 1147.909882][T29653] FAT-fs (loop1): Can't find a valid FAT filesystem 00:23:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x15040000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:57 executing program 0: [ 1148.001738][T29656] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x8000000000000000}, 0x0) 00:23:57 executing program 2: 00:23:57 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) dup3(r1, r0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2b) 00:23:57 executing program 3: 00:23:57 executing program 0: 00:23:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x16040000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:57 executing program 0: 00:23:57 executing program 3: 00:23:57 executing program 2: [ 1148.195351][T29698] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f90a, 0x3000000, [], @string=0x0}}) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000440)={0x3, 0x1, 0x1a, 0xb, 0x18e}) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000480)=""/235, &(0x7f0000000400)=0xeb) ioctl$TIOCSIG(r0, 0x40045436, 0x26) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) write$FUSE_INIT(r4, &(0x7f0000000580)={0x50, 0x0, 0x7, {0x7, 0x1f, 0xffff, 0x2880e20, 0x6, 0x6, 0x6, 0x6}}, 0x50) 00:23:57 executing program 2: 00:23:57 executing program 0: [ 1148.361769][T29707] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x17040000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:57 executing program 3: 00:23:57 executing program 2: 00:23:57 executing program 4: 00:23:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x8100000000000000}, 0x0) 00:23:57 executing program 0: 00:23:57 executing program 4: 00:23:57 executing program 0: 00:23:57 executing program 2: 00:23:57 executing program 3: 00:23:57 executing program 0: [ 1148.518676][T29742] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x18040000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:57 executing program 3: 00:23:57 executing program 2: 00:23:57 executing program 0: [ 1148.610813][T29755] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:57 executing program 3: 00:23:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x8847000000000000}, 0x0) 00:23:57 executing program 4: 00:23:57 executing program 0: 00:23:57 executing program 2: 00:23:57 executing program 3: 00:23:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x19040000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:57 executing program 0: 00:23:57 executing program 2: 00:23:57 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00$\x00'/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x30}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000020010200a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 00:23:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 1148.821876][T29781] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r3, &(0x7f0000001700)={@val, @void, @eth={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6abb53", 0x44, 0x2f, 0x0, @mcast2, @dev, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}}}, 0x7e) splice(r2, 0x0, r4, 0x0, 0x18102, 0x0) 00:23:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) [ 1148.955451][T29794] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1148.975613][T29785] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1148.999496][T29794] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (8) 00:23:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x8848000000000000}, 0x0) 00:23:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) 00:23:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1a040000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1149.059888][T29794] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1149.090237][T29794] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (8) 00:23:58 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00$\x00'/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x30}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000020010200a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 00:23:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) 00:23:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) 00:23:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1b040000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1149.292751][T29844] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1149.302324][T29844] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (8) 00:23:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) 00:23:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) 00:23:58 executing program 3: 00:23:58 executing program 2: 00:23:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x88a8ffff00000000}, 0x0) 00:23:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) 00:23:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in=@empty, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha3-384\x00'}}}]}, 0x138}}, 0x0) 00:23:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) socket$nl_route(0x10, 0x3, 0x0) 00:23:58 executing program 3: r0 = syz_io_uring_setup(0x588a, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3}, 0x0) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 00:23:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1c040000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) 00:23:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) 00:23:58 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x731b, 0x12, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r3}) 00:23:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045515, 0x0) 00:23:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x9effffff00000000}, 0x0) 00:23:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) 00:23:58 executing program 3: r0 = syz_io_uring_setup(0x588a, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3}, 0x0) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 00:23:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1d040000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) [ 1149.809111][T29948] __nla_validate_parse: 4 callbacks suppressed [ 1149.809120][T29948] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) 00:23:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000140)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80001, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x777cafa78c615d2b, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000800)={0x0, @empty, @private}, &(0x7f0000000840)=0xc) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0xcd, 0x71, 0x1, 0x0, 0x80000000, 0x2, 0x6, 0x6, 0x366, 0x40, 0x3bc, 0x7fff, 0xffff, 0x38, 0x1, 0x4, 0x9, 0x7}, [{0x4, 0x9ec, 0x800, 0x7fe000000, 0x9, 0x9, 0x80000000}], "051d5de3d54c55de8f709a855b4a7caba32ca509f21a1e2ec9ee45a8d7993fc29e48a011356538349cbcf604118ede86c30ea796182f354048a4725df4b3801cf00707aefbccdb641ba590050ee1659ff096e8a7a93ceb01fb14c0d9e4078626caccd8c8cb95362fbf0aeff395b6defdb74b007c7218ccc19fb0d677cd387c894030bfdf1251d849f7000a744d38387d9b3c103b", [[], [], [], [], []]}, 0x60c) openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x5) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') preadv(r3, &(0x7f00000017c0), 0x115, 0x0, 0x0) setsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f00000007c0)=0x57, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') preadv(r4, &(0x7f00000017c0), 0x115, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000040)='\x00', &(0x7f0000000080)='./file0\x00', r4) 00:23:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0, 0x5f}], 0x1, 0x0, 0x0, 0x59) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="0f70c11b0f090f01c466baa000ed66baf80cb8c1357c8aef66bafc0cec0fc7bd0b0000000f78c5b80e0000000f23d80f21f8b5400000200f23f8660f383c6152c4e1fd2e9200000000", 0x49}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:23:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) 00:23:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1e040000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045503, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) [ 1150.002453][T29956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:23:59 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00$\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000819"], 0x30}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000020010200a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)={[{@commit={'commit'}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 00:23:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000280)=ANY=[]) 00:23:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0xb1c5a3bb00000000}, 0x0) 00:23:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000280)=ANY=[]) [ 1150.221236][T29995] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1150.230276][T29995] EXT4-fs (loop2): filesystem is read-only 00:23:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1f040000, &(0x7f0000000440)={[{@uni_xlateno='uni_xlate=0'}]}) 00:23:59 executing program 4: r0 = syz_io_uring_setup(0x251c, &(0x7f0000000080)={0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 00:23:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000280)=ANY=[]) [ 1150.266686][T29995] EXT4-fs (loop2): Invalid log cluster size: 537919490 [ 1150.288415][T30017] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1150.312201][T30003] ================================================================== [ 1150.320592][T30003] BUG: KCSAN: data-race in exit_signals / task_dump_owner [ 1150.327709][T30003] [ 1150.330029][T30003] write to 0xffff888082708024 of 4 bytes by task 29986 on cpu 0: [ 1150.337744][T30003] exit_signals+0x124/0x580 [ 1150.342249][T30003] do_exit+0x19a/0x16c0 [ 1150.346417][T30003] do_group_exit+0x17a/0x180 [ 1150.351000][T30003] __do_sys_exit_group+0xb/0x10 [ 1150.355846][T30003] __se_sys_exit_group+0x5/0x10 00:23:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000040)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) [ 1150.360697][T30003] __x64_sys_exit_group+0x16/0x20 [ 1150.368396][T30003] do_syscall_64+0x39/0x80 [ 1150.372803][T30003] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1150.378966][T30003] [ 1150.381296][T30003] read to 0xffff888082708024 of 4 bytes by task 30003 on cpu 1: [ 1150.389011][T30003] task_dump_owner+0x2b/0x1b0 [ 1150.393683][T30003] pid_revalidate+0x69/0x110 [ 1150.398277][T30003] lookup_fast+0x208/0x370 [ 1150.402866][T30003] walk_component+0x5c/0x350 [ 1150.407704][T30003] link_path_walk+0x462/0x730 [ 1150.412585][T30003] path_openat+0x199/0x20a0 [ 1150.417232][T30003] do_filp_open+0xbd/0x1d0 [ 1150.421773][T30003] do_sys_openat2+0x33b/0x500 [ 1150.426427][T30003] __x64_sys_open+0xe2/0x110 [ 1150.431076][T30003] do_syscall_64+0x39/0x80 [ 1150.436252][T30003] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1150.442116][T30003] [ 1150.444424][T30003] Reported by Kernel Concurrency Sanitizer on: [ 1150.450558][T30003] CPU: 1 PID: 30003 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 1150.458866][T30003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1150.468971][T30003] ================================================================== [ 1150.477009][T30003] Kernel panic - not syncing: panic_on_warn set ... [ 1150.483573][T30003] CPU: 1 PID: 30003 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 1150.492273][T30003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1150.502468][T30003] Call Trace: [ 1150.506044][T30003] dump_stack+0x10f/0x19d [ 1150.510936][T30003] panic+0x207/0x64a [ 1150.514909][T30003] ? vprintk_emit+0x44a/0x4f0 [ 1150.519896][T30003] kcsan_report+0x684/0x690 [ 1150.525010][T30003] ? kcsan_setup_watchpoint+0x41e/0x4a0 [ 1150.530635][T30003] ? task_dump_owner+0x2b/0x1b0 [ 1150.535903][T30003] ? pid_revalidate+0x69/0x110 [ 1150.540743][T30003] ? lookup_fast+0x208/0x370 [ 1150.545611][T30003] ? walk_component+0x5c/0x350 [ 1150.550361][T30003] ? link_path_walk+0x462/0x730 [ 1150.555478][T30003] ? path_openat+0x199/0x20a0 [ 1150.560266][T30003] ? do_filp_open+0xbd/0x1d0 [ 1150.566030][T30003] ? do_sys_openat2+0x33b/0x500 [ 1150.570880][T30003] ? __x64_sys_open+0xe2/0x110 [ 1150.576840][T30003] ? do_syscall_64+0x39/0x80 [ 1150.581428][T30003] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1150.587490][T30003] kcsan_setup_watchpoint+0x41e/0x4a0 [ 1150.592889][T30003] ? __rcu_read_unlock+0x4b/0x260 [ 1150.597898][T30003] task_dump_owner+0x2b/0x1b0 [ 1150.602586][T30003] pid_revalidate+0x69/0x110 [ 1150.607170][T30003] lookup_fast+0x208/0x370 [ 1150.611788][T30003] walk_component+0x5c/0x350 [ 1150.616503][T30003] link_path_walk+0x462/0x730 [ 1150.621290][T30003] path_openat+0x199/0x20a0 [ 1150.625798][T30003] do_filp_open+0xbd/0x1d0 [ 1150.630194][T30003] ? noop_direct_IO+0x10/0x10 [ 1150.635144][T30003] ? __alloc_fd+0x33c/0x390 [ 1150.639676][T30003] do_sys_openat2+0x33b/0x500 [ 1150.644422][T30003] __x64_sys_open+0xe2/0x110 [ 1150.648997][T30003] do_syscall_64+0x39/0x80 [ 1150.653470][T30003] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1150.659517][T30003] RIP: 0033:0x416d81 [ 1150.663412][T30003] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1150.683001][T30003] RSP: 002b:00007f8af5ce8bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1150.691485][T30003] RAX: ffffffffffffffda RBX: 00007f8af5ce8bd0 RCX: 0000000000416d81 [ 1150.699443][T30003] RDX: fffffffffffffffe RSI: 0000000000000000 RDI: 00007f8af5ce8bd0 [ 1150.707398][T30003] RBP: 000000000118d018 R08: 0000000000000000 R09: 0000000000000011 [ 1150.715353][T30003] R10: 0000000000000006 R11: 0000000000000293 R12: 000000000118cfec [ 1150.723304][T30003] R13: 00007ffed68a67cf R14: 00007f8af5ce99c0 R15: 000000000118cfec [ 1150.732878][T30003] Kernel Offset: disabled [ 1150.737440][T30003] Rebooting in 86400 seconds..