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", 0x2000, &(0x7f00000053c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:04:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@rthdr={{0x18, 0x29, 0x2}}], 0x18}}], 0x2, 0x0) 08:04:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="8004"], 0x480}}], 0x1, 0x0) 08:04:13 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 08:04:13 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x7, 0x0, &(0x7f0000000140)) [ 1090.858860][T10124] usb 4-1: USB disconnect, device number 71 08:04:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 08:04:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 08:04:13 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}]}, 0x44}}, 0x0) 08:04:13 executing program 0: add_key$user(&(0x7f0000001240), 0x0, 0x0, 0x0, 0xfffffffffffffff9) 08:04:13 executing program 4: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) [ 1091.358903][T10124] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1091.746111][T10124] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1091.746145][T10124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.748248][T10124] usb 4-1: config 0 descriptor?? 08:04:16 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef0000000109021200010000000009040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:16 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}]}, 0x44}}, 0x0) 08:04:16 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x80086601, 0x0) 08:04:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000aa", @ANYRES32=0x0, @ANYBLOB="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"], 0x480}}], 0x1, 0x0) 08:04:16 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:04:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @broadcast, {[@rr={0x7, 0x3}]}}}}}) 08:04:16 executing program 4: mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x1100, 0x0) 08:04:16 executing program 0: syz_io_uring_setup(0x27ac, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 08:04:16 executing program 2: openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) [ 1093.919220][T10115] usb 4-1: USB disconnect, device number 72 08:04:16 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) 08:04:16 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}]}, 0x44}}, 0x0) 08:04:16 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) [ 1094.435999][T10115] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1094.796145][T10115] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1094.796182][T10115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.798249][T10115] usb 4-1: config 0 descriptor?? 08:04:19 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef0000000109021200010000000009040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:19 executing program 1: bpf$ITER_CREATE(0x7, &(0x7f0000000680), 0x8) 08:04:19 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 08:04:19 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) 08:04:19 executing program 4: modify_ldt$write2(0x11, &(0x7f00000023c0), 0x10) modify_ldt$write2(0x11, &(0x7f0000002300), 0x10) 08:04:19 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8942, &(0x7f00000000c0)={'sit0\x00', 0x0}) [ 1096.991803][T10115] usb 4-1: USB disconnect, device number 73 08:04:19 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) 08:04:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x7d) 08:04:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000014"], 0x480}}], 0x1, 0x0) 08:04:19 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000007200)="8e20e03dbbcaeac8799fd36b9f0f7509a58cdf02ac39785ac9de1f2521fe4e846263f5d0ba98d94ece4af4364912dd326a8c49cc52a99afeddd7c3e8cf206b76c079ce037776353b7835fda6bfb4303f2f9e2f454b64daaaf501a1c5de7ba1b346d361fb2278ece8afeec3faea0e941cfa0c91b2514ab63607c81523be6706bbc0295861454f0f0259e10b8868b7a1f3f2d6d6352f866fa34c104f536b0712edff362f220e7113e1ce8688d2f373e3bbf4cdc07c860859feb449603f85b8f239b157d0dbabef914de8ec16ecd244781086f42c6d9cb37b2b01b18c058ff33a3843d70c701fb85cb42ad301a1d13ba041353a2474621832f28ac603824f261c13328da97c26d1684262c5fd872e6b4839f38d69f6f04ebb21f82fa8d94de2690cf8f49d980e3b5bd5ba57cd27f32675b557576cec4438e7282fd79d0b25a948959c872c106cdd47045499d6151366bd1e6c58ebc579c93def47ee52ecf554517ec3543673fa128f7f79ea52c3cafffc9dcda89d4006a1e1dc950d4cafe45de4729d95c32a62207e0044b06094f38630f5bd4db61abc5655a6675e34db4b459b376563304e435835e3b2c81a4be8865a7e952e9e4ee27ceed13c91a6723803bae7362a62fe18f7c2babf74501eedeaeea686121d62db9ab00de85505d32ff7923322beb8f31d8896bf00947baacea195eb3a153721033468a45949852db0bfb1909c85458b87288ac9b9ad4e7417175abdce204f625b75e85b43e022942e84f2bb4c4810c6b0c8b69416b8e1a6f94668f97da8e89245b73e860d70a4ee611a47c310b04e4f88bd1f08703fe4eb44030b8ee26f8b7bd8e6994634fe800918c4074b3f4c95a7906392b68e1a59f2fc6a5df60aa356e3ad726d585d990f74c119835e01c37857d8e0efb0268a4395c2c2904ffee76115d3fc1e5cd8089830b45ffcf06f8c512d91f291cddc6504f48f7c84cad694a87bb31d032ae5538ef9c7893aa152f729c0c6cf659dbfff8c9180cd20b5f4c7ddb349ce2dca83d5970f86f3a6afd0df7462b2eb9d09eff3de6e8ad0ea840af9f3e87a8c2ce3cf50e8e7b1e08f9521693746921616362be11b78a0937ba55e5d01cb93e0263f1319edd42c0a510b159ffbfb52edc3d0475acdf4d9a69478af79b5ac7a2bf4b846a3bd7199347fabd18a18074aa26c69590e11752a015b7cfd3524b068baafa9cf74c2331161163d1b8cecb14d4128fc0c3286ae7561fdfbd8a84286f64b858ae637f4a7d4657656eaa83c651f084828b02bc0039b37cedbb66dafbd90c0081e87c496693e0a572cd62bf8cdf31b0173f5af1dab97717e68485a51caf7cee1d8bb2e51fa48e0fa481f0d08a38d429c7d15381759f8c3260849f0382f62a8acfbab0bae70ee653fbd4ab7f140d3c8cf727ae4698b95b6e964fc86fa31b80791056823cf29b3250850e83a473641af70deacea9cd06d0c5f25c3c0b71ac280e752c7d154547c5b7bb2d0c05b1ac3569ae6b36338dabf1bb0d71e3202d79603faab264d2dfcec6bdab736686dd23411ebf54cc14d8b132f1fb9c109ab1c3cb247c5b3de3cc135db92f70143c0abd8f38469571ee8d94a6b1fe55e6bee4727359d6bdd2ec7b432671c4a43e86ff24fade09b43c7ddeeee3d5ff3fed23a811d5e8f5698541a211de2fade8b04bd387aafc9795e6bafda6d4998399c61a6d1b48c61367276b8356f9ebcbdb4de02e22d8a856ff314204e64a5d705ec76f0b515fb9bfa1725acd8727c2228cbc147110f5158d386eea071337eb43ea5abccc53df224a77a13141eea92a758f04db48b2349d56d6a6c175ea638f0dee491b5fa5445da55323ae36359a8adb11ced807eea281ea7515362d4219c106f79ae74a5e9f0201ebc4b73bfcd65ca80b79395b5c2340ce99f05bbb8ccd6f0e5b02a50e75f61f4bb4535a9ff6ca2c44122f84f3d3352e872a7ce57dd55b181f154030f548bff32978244f215e39b77348559674135eb06e5c6aa23a05bc7e0ccc4f995e91d4365263e013877226de8317d17da842489c7e865a9ca4423795ff813afb426f32a5999ed209fc13b8487b4c58813f313dc896e68f8242d966d9a9565f764f82db2146ca7e8bcf5b4dbfcc2ad28db10be5d234b25d72948104058d8957b7fd7d21870df971c58df7b8aab8a699d79c0e03e651a5697beab8f69fbefb34218ac5a0422909cbc67603fa08110ebed34433cf1c2f08e4993dc2780b0f6a2551de3269623c9b300c4513a615a5a266bee486db8639b0226d60975b7c9c707b2c44dbd5439750d6f2e6fded527d91ff7619197cf3fa0a5e105170ccbc78801da1312bd1ba5b043fb22d438d06352b1b01dd2aa26e5e6fbbb1fb131947396678731fd442f972d32f3a60f0c367f163431cccafa0938b2e78c8c4ba64126a93b293416376b4f7ac7a16bff20b671603bd45b8d197793b0b7d6f9e92d5a6ae51fb4d03b29b048669c30ad5795b3b8dd7dd5e9b4a50d4e583384d6aa3213cffa94e7aaf96e4db3bba040f9462a0a1fe3dc53b4fa879b92ce4a47f6c62914c447ec106f2e4c4274d7900fcd2e4a4c26b0ceb5244536e07416a5bd0acb0617a66d86dca34a3fd8ebda153a22065949a97cb8ea662d347e69a9b85471f7d0ee9fff06f3302b3a9160deae1644c19b1c0fba15bc3de79792c2a4e225cdd4a7cfb40c6bd5f2b5d6722572db89455fbfb97de4758258fd3adcc2f704a6d044704840dd00265507c3ca44a1316e7aed16fb152b29fc3cf43251193632edac73e6fd1b2f4184192b2befc47ee7918bf9ee6b8348a28a66676920def6491f7ec0b1a2a7c5634b28e78c4b0e16f5a9ecdd85a58fef3f87f5052630960e10c0d0081f75807cd713bf07f80b338d596cfcf8181b454d126f6cce82363618646a841dc0890233939179a724e03580eee909324ab1c88ad00004820bd6b0ddcfb53d649ce4e18ca732ae51f84b4c1cfe61b2bea602d9539561ec62a8622411b23e823246b1213ff738c23845a55e01c51133ed827b79099d80b311699facb6766cc2d42a960cc2fc2d6898ecb9225e6049860d7528dfa0f99f192fa79962b3bc6e656ce06fb01f3992657f935ea576f8c9f70aa6cba36649ee6ec2bf276647c70777f0a4e0c31cdded4afa486bc627a6615c8a480dd73b27a216b0fa6b906960eda897c4b5f38523b69d24820ed022f16cf3b69114f45976811dd20d723109d1145a1d71f93bf67671853a35bd5dc802b6cfdd3e9e8cb4aea3ddba1030bd1b1ae6b8a23a3ec580764685a33ad2b1febacf69a5d331ea3e07ef1e921eb891ec56e8d3368cb596e83fa13b2d33533c4d0d7c0dd21855c25f6191e6535f47a380a0d40ce5d276fd6e3b405b5aaf5c1ec452ac85ad3c6595fe92ab3349d4d873a849bcd75c0147c265190cae0053de773cc6439b0d205147da7821739e7861d0c81b6b148c241b95657c9cea5807937478eede74bfb689eb69099fbf9afefd075eca69c1c8f945cba95a7a19a8541f05145e0cc8130db49ad8d91bd5e18c0b10a84c7436045afd1942101958ed231fdd6bf3a54c6751419a68077bb4d8004505d5c8c2b164ffd1f2f47fcb88e19d521462784c027118862464f3b366b78b4ef48fb6ae29b6da5acecd39c7ce09a9d4afa4aca6dfa60ebe87670bdcadeec318c8fa1d38901b477af64e892fd6abde2dce869542c658db1ca4d66f35a7625dc9624c0dde852d4898d199722098de5f92d5fcec9ccd240018c30fdda80fde91e675822ed6c945373f98298f0c5358290958629252ee220dcad193651d8fb9d603bc47f203a837f201ddee0d26736ce9c57dce29ce29bb8efe6f2bc769fe92bb2ba426b67011bb71d7c8e3a2cbd8053f5cfecd6ffe574343724e68290d8b834800d67b8120e0f3aa1977970641b4c29baf6a70f2d281ac2c399d13e12a48ff8785d399da59122dd60260d3fb6dfb4736a6bbfd9ec0cc572fa2383be3ed8e48080399db6af03da651dca302523dadaf2351759bf1133972c3b195f5704f78c974393e0f91543ea35c0143aa1ea80030fd943aba6711ef222f3cd36dcfa702e41d1037a09bf05f375217121b48f56fdc20bb916503ddbbc4ccd44c803c50daa90f1cadf0e2a43f0863c5993956624b49b042e52f52987c9d76217ea018ae9f7110bbf5af4b65897bd7a4b31034a14bc20d1251c9c3ffd6c08cb4613e7ff47ad2b48c451ea335b3fc318b6cab6c22c4aeeed9f0f7d23c1e4d2106d55b8fd514acddb305478a465b598b06d86875d80dde62bf3d9dbf1c2e0044f1f4efb97adf2d246b7786db075ea6c7c29e1ab0cc825092fbfdc1784f18c8b7c26c6a73ba08fa453e0486676088c69dfa4b92b5fc96e3680d18f8e733034a5aebb57c1d271f3aba33fac20f27179370ddf4a60ec93d9be852a532b5debb8fe4f66a4b26d28001750269037d1875eff42230533958889f373172afec9d6178be777b06cfaeacfa2b154b48142d93961e9aa285470b59847ebfc05996c24b4dc6eb2da41504510e62793d0368e3b3c3186d6f07cfef597d9fde418bf211be65977b7b2345db04a88b705f5ea7492d1e585e4ed45f18d3d9658a8932bb705ab414f59b49537b015595635b1fcd9c81558dba306467e22e3eb63615979a786968235c993d850491e4e21e062fa16754200221df01162ce7c9f2a23aa15405c3eda437ee6683af5e3d7c3721b431890b899f7fa50e354bbf4756430b7484bfa3cb38eb6375a04080dfe43e899918c826ad63d183bbbdd2eabae924a4ed9590d344cd0df1d5d057c9c420bbec7f8bc70b929245c965b8221ab7a7310008c34a70a5912c5e1441c7a190a3d10ddd9f2944b3556179cd447c5dcf4ca1b03c5b4e9f5748b39013d5bfd4cebebdcf52aed465a74f09954b4d16344ea39c34a4145805e300ecda3faed1d3778ed67fdc7c5248107caa97c418b5b824641dd5623c630df9f3a5de8b243ac1e3f6127a6cd7fa78bd79ad2ef1ac9ec4b1977b93aeb74a39f8770b5a481207543efaabe560fd23f3400dd66dcedfd0c69ff633e8ca2f7728e0d563605ff591ff9b5638c0ddd70802f57911e35a89475e4d176c2ef4f050d72c9075db35e44af89dfa5c8b96bbdf182fd21053d84ead1fe29f21dc48b547c86a9e58c13c369dff0e2661aa80f4f4379b076c27a1a253a75bc01e7c64cfa38fc255feb03c1fc01c5ff5acb768684b100d9fddbf1410d8ab099ebbc9f510a2749e9f0ade97f563b718024763bf6473e10f353c599fdc135abd2063ef84316a644a9eb954bc1dcd18a9510c9fb1bd8a47f906313f149836710aa901866c7addcb0787f7b06672c4afe33aaf65e98fd0fa2c94962b25967ebe3fa2b76c102e22483ea8a75244f5fdad272ad57efb926b0e5165e7132a386c85f31d3b37d872bb888abc89fab3a9e379520f56928f145c96803f2337c077c86a6426df6a7b4e31bd16ea145a36d58a9df3b1728bfc9072a664e6c0da43171289aed310f3250e24483b8b6c4ed9dddf920101a6517db00967cb8c7e59d7691d66f1b06002ff85b7e1dbd3f5d2ab5000912393e1d3aeedda2d2f42fa0ce588df0873a301213b270c1649f903535f5591b78f482754e1bd3650d87022c59c69df1ea13da634f95038b8af1d26122af6a5d77b790ce37a4c3cfcf690681f0dde3885bfda521463fb2e2fd826644580db39c715dcb6de2595be90206801c5f4e3d093fc84ebebc1372f2843e024a900e56a4c7dfd71091be494ca98483ef39f5b294c50c35e7a9353984f0e3d4026c1fc0be313c99c18b32abacc0434534d12686108dd6fe4b8cef322558a251eaf5cfa38ab6177a04b4276c7ef37c4180506d59a3b356e44214346c96a1d704109ed4a6c508359b971f04802655512f93a2ea9a47e8834e97080f4d8ea3c2feddd4f6868b8bd2a713ed90887ac5aecb6505cf3ae4ea890c2d6c3ffc407bda51e30f130807c03cf2e97dc1b403be9594ddca10d747456b124700a2886a1ef30315ffb3a68ed4402e72629ed87d3bf1b45c7b47d9e01979af671b21edcff51f440a53fcdfa977a6c92ba7dae0b3bcfb5e5785658864265d0a5aceec80a5d302a4798ba589ae99643e8aa5035193f5e7f39c3861340286ce0ecf63a8548df69529cfb106d73d39d5d6310381d9a92553f7d54bff86d168c144f089391f5c153fce5bac0d61845438cd5ce489fee4ee920514445dab9784e18e4b07a65bf0697de175dfb0483c1660aed3fb4af551bd004836b415ad05f6ebf9191e3acd18d22df0cade41123f68edfc67985dd8b59296067ad5418d3cdde9c95ed8c0bc59e976f47ed26e690a2ff1b1cbf6635a529ed7d80624703ba2e5013c253a500637bc755a826b9819f7575fd02a1201390522e6d8a09c818a15a9ea505e7ace0ce63a7b4eef018b50fc295796da55e8d4c0c424c01262d1ed56e3a7b8dcde289c55435d20945cde710168a8c25876a2519e2cd52efe30299773b263d78e1fa88edc95d849263ba2cebbba179c4674277823f6fd171a9d949f233aeef72c60b664d73b8b984fd30f8bf82f243f2759e5122152a55c1da9d916a14ca2e78960678c7312e0eca5129b0263675c021ff950e30584ed6d1b6b92550d485c58480934cfe6359112b45684d3de3290bd844bc9e78d5c1752c1f15461a00657298956ca733157f4810c3a88dc334457fe8d76353fafc63b0754ec3c122c511433d5f06309fc39a2f866dacb3543d880985b39ca866b98ec08fd6d05d0028aa5e6e8396f9fecd811c4bd97131d15e850fe3deef348d294f5e054ae3c603b752574f30a4239409b1607cf256ae9bd93d69126ae922c5aeae82afaa53415b67c7aefd2fb0f0c70812feb1eb1d6b87bb3e0e64a1cf825cace4a24c47e1592d835697ea77861e77d333b076b077d4e06da040aaef7417a21d289e32da56b73b255398f0e13ea8ae524072ed7c33387a0158b3d8c8cb20b825b168d2516569d8931762b65c85deed99aaead1e2242cf9ee31e9d5bc9e2dde53a2d765ea3dd563caf779136bd6b160ccd2a730ecf62e8b5d8d3a41e0345bf61d36d08c559e6205124d2930623c235992da7a0d7052468289d0fe83f10e5b4c6fc81d9bc8c87d13c3fd1a9b695f6d3588989b6e73e8f4548e0771d7f3602153282ee8ca9ff145feb0fa1afc6feab4d32498964b2b31746902d26e17b6664a4d828732c2c4f611ddecec00bdb86b4c9e8c0357a9682bf2b7d164ca4f1e434043f6769c077904bec5256044f511829de50361d39264fcf01bc2fdc33c4904d22ab92035d6a4cf4d421be82d0e8d793a6cd7f031e4ffc267cec5b2781f5a07578b7ba43055ef15aa74a03fd094d350b9e915aa43cc8d7d51257a0ddbc9f8d4071d5d6a1b94ab2b1660a7dea4b0e123eca0970d27d596e3fd58560eeaeeb2bcf8c78b219381cd7d6142558b05d14759fb8c252b0122b506c4997bd26f29c5716c7ba868ac31c696a31b084f557f163d0dbea580f462031506603cced55e5707d743f6fec5ba83b902f4ba009f06449b9337d2703eac732db57a4330e2f260c3e4b137d40ee50fec53397a4610ce1de6060de7b10e9f6f784a4f66f672b35960d1062d4d932e7ac62b1b622fd24ee617410ec412c17679abd61c4b344322e4460fc73461661d762b00a86e1a4df4e16c99dcdc1a9d272d526a267f84fb97f7b03ee81b5a9fdc37411ece9574afa8cf4bcf609e7a561b735b9c65b2aea3726456ac65cdb7f68baee6aad47b11f75350174bdb510de1cc0b800b8300e8899325f8c509c9363f022b4e1e22aceeffcc2d5b6b4a07fd0e10b405f8629a0964ce9d6711213d8efe52871fdf58b1dd88cbafa45f0625933a8e55f38f914df224121d441c60617de6dfa0d979d058b6e241340968a3169e2eb2b1b2456081f542803b9f91b06ea3fc944ad532c7c76d60452f831d768bb1e27e37556fdd0a78c901dd783275d6054dd668ec8c0d4c8091db13c795599ec8bb07166e1bb922d307c6af076a6a3caddc6167bfa987176531b30c99193460cbad914fea94037add31035a2bba1b640edd621e3e3056138041b402444ecaec720408072af9ef3260c4cdeb0f8ec5d63a82d0203221c2c6f6a3b5f4013bb0c6a14a5b889e016dd23e4e4057224204fb86e4859b59c3276c2ef7160c5f649dfafb1a3fc4921ce4d4240d59d385e6e7ef3752fe255e7998a16b9e381e565026cb815a8bcfd94459658da781a0b6c2bc704127e6b96b53376ff1a2063509e4b46e88527dc29d31d0df42a594fd2dd0f3c5aa1ffc3012f49bec87c689d9372cb7dc70c5b19a0f6fae9a369726b69bffc6df38e2a915da71782c5ff8e03fea37d8f6ca6850ec6e4dc9db22dee9e3eb0b8c5864833fc11963d5bac2da4c61433f3dda7a5a4f8e1c39edb7fa579177f14a50086eb0bc7ea3240e498bab4fea6039a1cd73ae4cdb688d964d85339b14d44a7c1880a07fcf33455b1f05aeaae52d1d53d898b0fc7bf64f6cf70a1988fb03c970112cbfc087884770881f332fadf0ff1e1f99ae11d8067f43ac67c6efc64b4880f89ad75281e261b25884cddda5a2e584614553c659c2c42c4745dd028ecbbc1edec20c09717aaebf6b5de0f898eb9114ca520d3366c5ef5320f884c7fefb13aeebad8b7dcbe1c0debede0ed2f06977d8f0d3bad40228748fa4515564f0eb586945dac24dd17a68208c220246ca16a225591ac6379ca46cbe6a517115245c4b9855dda9082a653fa57fbe6313f24b8f212b861634f1067ae5cafc4215ebf3f4ade0d60ea525c1e4005b173f86159567d602ebede812ed802e87138c89c81dd60fa71a4a16396776da16de604663aa2de945d487b7edeaed672e26cb5eb24f975a01b4fa18bb257d66d128be26221438293cbebe0eab1b8cc24dba238d5b680c632dfcfbcd50085d92c3ed1bc833151634f2fda2df7c7bd194121c51b9ed3368bcbfe41573f87a858a23ebfad104ca7b82bf281d95a873e880feba9e381adbf08d9bafd7a98c29ed5b81170f912663990ea905ed4f10e8c59502cc38e257d750661043d2df327cc116fb428974bb411224eba065922615d4cead34a4a2fd8cd21266810080a3efdcdbaf0c57a61f0910b921a75b6ba65b351ee824536141c33e54cb4a834646e6a2666c90861c4c17aad01ea588a9b594707e37f33df622145b470ee49402c38365ac8d7ff4cb73fff5cdd90f6b3684863052fcf5c744316e37864dc81348d151bfa82909722ca1f18d72d45b048835f512356029b935176d654198ed7b3cb1cf2ad64df8090eee9409dad7db49d635dd9eaa18f689309d7e912eb4937c7112c1d6f099c1c736e60b87405470e0916a48e77c953d73f5d5cd3a8daf7ee9a41eefe370a032ea4b281afa0f2649c1b0af0c6c99c34806d5dc6ee391a881586e31719a1d19d0aadd853c5cb1ac64092ca2f7a8085cd944183f775ff0e6f8a9d70dd4d5402b8e2c3c8d8fa09d6474b466469343fcd433d356a133b8fb67ac25274d663af4fdf7f643cab89b2e28851e856ebb7646b7c2f57607a581efabe1f259231db5fca1393a080cc439b461d51c30a62f41d0fefe951828bf984bab8217959cc32caf105f08ba8fc08f620c63fd054f4b3689a46c1e5e1f959f6d48e3012a4a19f66e4da0b0cecb7f43672c85d58d2a32feb2e9d981d12bc4a3b0f421f2833dacb8b489793decdbcb67d6023c4b6a5b00290517651f79867e6588f54e889cb6e8aeb9a45363960a0df7764c6e8d94c0aab1302ac3bf46b4357e270c211611b80c9f2f87df113aebf2a3d68e4a61d4e90306ad3a6b899711edf91b96c2d702a72782ccf356ab49e2bbf91e19048d514bf554d4fac9c647187e1c3b4d3c1d419033efc514e3c5fab93b41620154fc360f12fb3dc135d94e1a1a1fac71fa65510130d271894136b0b71ac96c8f1173196ff7eb633145dc3794dfd7a0356256c020820bf0dc55a5b4223979baf306eebdf1d1e214d463c0497dcd145bad8faa44ebf1b1a21a2b886a75ca66bd13d18db6beba982d618a96d3e326c7524cc087991090de8b32dda5f5d120927dbf6057770a6efeb4a951bd6e5b1351b59f16841cbb1aa8530e8992c16a14f03ae4f9d7be91c91d0fe25e887b036f4f9063c7ab3e64eb80fe2934d1aedabd0f550355f84cef57b6b7261010aeb87d21576a0bbb7396c0f49f6e01a26fa2982d4e8c7653424a8ea31709674c80161c48a99d02a9ab402e65f406e515ef61128d42850eeccc4efdccb20d1bb9a2689dcce9e35ac32ea8a92f150d6b135e8b77cccb107b270749aa382e4ace5a7627170ab06438e981ed443717f15d826ac6357c3c14eac89c53647fe024b0ab47e8da34e067192d3b242bc6df0bcaa78b0219fc3de0cc151900613769650fa19010f7b9129e052bb0d474b73a679b92a2981cda282868f12ec95260dd8ac7f6cdb56a6c3d00d7f6f33a361e0f14b20b4c2feb765e199d1bd367f1a44dbf2de7b2560a81391de52321d887376aaf932c53fb47d77b153954d570629d6ad7ab05fd727e6e0476f5d935f9a70b3f3063fdeb7920542494b5751774c0c60b058e7a28ee0721229d1513092af947486a6dfd578e0e9395172a976955f15f90b8c62bc924df399a649c1fa5d8ed2c53921e55a4940b745b33442ead31ae5769809602244c8492628ee87ece2fcb762c85f5173c32213624b4f1893477421932e0b7a49ae8e271c979322c59d0422a93c3eaaa6582293c363563503c4e20688715e518c2a521c56d37461e1649d2d3c1ab9bc059aad9634923121e9aa8c0d7e87f43d327816fbc108b7e2812b1d4433d322f7c19062e246044ee95e7c51d4bf273d5fc8819444624eec3e107c41994be7848985d7cbdc8940baa9ce2dc70b499f545660f7ac399233c9dd264664feecf487da1d71e05fb2e65ce6de3a4f85cb590edd259ffcad6f33a18d130321c13d4959750e53dde42051c74d3a4d348082aa6f3e901c6dd9ef75cc369fc55d5ef89c48a74068734353cef5ce90ffc8fa45364a2cd0e22b663de67efb8c56d254ec66b2206a4bd79d21fd9e12ac85dd3e28093d2762e597bcbd3265d9dca63dd361f17f6a606ac7625f7d865ff7a569cf538ae7d8c12034f122090f891f8e67d3576f22844a43972edd6e95f4d67c081001e8f0512e871b589c8810c940cdfe0d7c94502ad995dfeacd1fb531a7c7731b468edde7664f33b0e8b79712ab9138bfd56bc1a60ffa2158127f003dde269fc83f9ce1ad8a85536cf679a365b705693ab1c3588e8ff2c55ecc28b2ecc9cb6c72c78973e4a56418a42fb065bc2a819c20770689b3a02447529ef9156ec3922d669d3017d49a7f0be185feb4096ab2b0ab3b8bed347e5489d59b430b098d95ff240c735ca87e784f638ac32c992e2b608ced5b6628e462e76daf793dc072c8534315354e54bf4acde9c6f34eceb55c2a51b4ced9129053cec10e3febec7f2bbc36defe543c0cbe6e6108a94f70bd76883f088560422211e77ab4665bfa6c2a73ee7b60cf54d9028ccd57bbe672e7d3236ad8614a7424409a7d93eba0b400b4ef8", 0x2000, &(0x7f000000e0c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000004d00)={0x2020}, 0x2020) 08:04:19 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r0, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 08:04:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000380)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000240)=[@in={0x2, 0x0, @broadcast}], 0x10) [ 1097.476024][T10115] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1097.836641][T10115] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1097.836676][T10115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.851512][T10115] usb 4-1: config 0 descriptor?? 08:04:22 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef0000000109021200010000000009040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:22 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) 08:04:22 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private1}}) 08:04:22 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={&(0x7f0000000040), 0xfffffffffffffeca, &(0x7f0000000580)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESDEC, @ANYRESHEX], 0x438}}, 0x8000) 08:04:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={0x0}}, 0x0) 08:04:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x7a, 0x0, &(0x7f0000000140)=0x84) [ 1100.094763][ T9294] usb 4-1: USB disconnect, device number 74 08:04:23 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5451, 0x0) 08:04:23 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) 08:04:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x0, 0x1, "eb"}, 0x9) 08:04:23 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x11, r0, 0x180000000) 08:04:23 executing program 4: getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x11, 0x0, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x474e, &(0x7f0000000500)={0x0, 0x5677, 0x8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) 08:04:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x110) [ 1100.575980][ T9294] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1100.936121][ T9294] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1100.936143][ T9294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.937406][ T9294] usb 4-1: config 0 descriptor?? 08:04:26 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="ea", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@tclass={{0x14}}], 0x18}}], 0x2, 0x0) 08:04:26 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) 08:04:26 executing program 4: bpf$ITER_CREATE(0x3, &(0x7f0000000680), 0x8) 08:04:26 executing program 1: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="e1", 0x1, 0xfffffffffffffffc) 08:04:26 executing program 2: keyctl$dh_compute(0xa, 0x0, 0x0, 0x0, 0x0) 08:04:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x82, 0x0, 0x0) [ 1103.167736][ T9294] usb 4-1: USB disconnect, device number 75 08:04:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, 0x9}], 0x1c) 08:04:26 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) 08:04:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000a80)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in={0x2, 0x0, @multicast2}, @in={0x2, 0x0, @remote}], 0x3c) 08:04:26 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x8, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x8f, &(0x7f00000003c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:04:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x80108907, 0x0) [ 1103.666063][ T9294] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1104.026205][ T9294] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1104.026244][ T9294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.029794][ T9294] usb 4-1: config 0 descriptor?? 08:04:29 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:29 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 08:04:29 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x14) 08:04:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x25, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:04:29 executing program 4: clock_getres(0x6, &(0x7f0000000100)) 08:04:29 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}}, 0x0) 08:04:29 executing program 4: bpf$ITER_CREATE(0x18, 0x0, 0x0) [ 1106.284284][ T9294] usb 4-1: USB disconnect, device number 76 08:04:29 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 08:04:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x3}, 0x18, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040), 0x1, 0x0) 08:04:29 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) 08:04:29 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 08:04:29 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) [ 1106.758327][ T9294] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1107.116333][ T9294] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1107.116371][ T9294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.119277][ T9294] usb 4-1: config 0 descriptor?? 08:04:32 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:32 executing program 2: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x5c5}, 0x0, 0x0) 08:04:32 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="ea", 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000440)="82", 0x1}], 0x1}}], 0x2, 0x0) 08:04:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000020c0)={0x0, 0x800c}, 0x10) 08:04:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 08:04:32 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) 08:04:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @private=0xa010102}}}, &(0x7f00000000c0)=0x9a) 08:04:32 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 1109.354039][T20049] usb 4-1: USB disconnect, device number 77 08:04:32 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) 08:04:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000004ec0)=[{&(0x7f0000002840)="dcf8653e0f705acbc7aff25fd5b8cef962bd05faeaebaf445a572e282dbc70378f80884da267441c70dd3b508a76be2fefe6eeca1706161dbe508a454d6544305c9b648f5218cc5b028730dd3924f0054610c5a8937f41b0cff7aa832f8ee796417a95ca8c0b5b84c70f7957bcad7c5a5fddb03ef3915021123bd653c28b2ced540764bd57b110684f1e67d206f5ca3721ed43bacea680f76cab", 0x9a}], 0x1) 08:04:32 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="ea", 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000440)="82", 0x1}], 0x1}}], 0x2, 0x0) 08:04:32 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}, 0x0) [ 1109.885969][T20049] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1110.286109][T20049] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1110.286132][T20049] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.287493][T20049] usb 4-1: config 0 descriptor?? 08:04:35 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x74, 0x0, &(0x7f0000000140)=0x84) 08:04:35 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) 08:04:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x3, 0x0, 0x4000000) 08:04:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x1}, 0x14}}, 0x0) 08:04:35 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x33fe0}}, 0x0) 08:04:35 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) [ 1112.442795][T20049] usb 4-1: USB disconnect, device number 78 08:04:35 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 08:04:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x21, 0x0, &(0x7f0000000140)) 08:04:35 executing program 4: pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) fstat(r0, &(0x7f0000000100)) 08:04:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x0, 0x1}}) 08:04:35 executing program 4: memfd_create(&(0x7f0000000180)='/dev/btrfs-control\x00', 0x0) [ 1112.916071][T20049] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1113.296064][T20049] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1113.296099][T20049] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.297725][T20049] usb 4-1: config 0 descriptor?? [ 1114.036106][T20049] usb 4-1: Firmware: major: 243, minor: 76, hardware type: UNKNOWN (30) [ 1114.276137][T20049] usb 4-1: failed to fetch extended address, random address set [ 1114.276166][T20049] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1114.276286][T20049] atusb: probe of 4-1:0.0 failed with error -524 [ 1114.279900][T20049] usb 4-1: USB disconnect, device number 79 08:04:37 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:37 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) 08:04:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000040)) 08:04:37 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 08:04:37 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x4000}, 0x0) 08:04:37 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 08:04:37 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)) 08:04:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x180}}], 0x1, 0x0) 08:04:37 executing program 1: mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}}) 08:04:37 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) 08:04:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110bb000000000025000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 08:04:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006380)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) [ 1115.126288][T10115] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1115.506086][T10115] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1115.506121][T10115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.508845][T10115] usb 4-1: config 0 descriptor?? [ 1115.597587][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.597618][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.246078][T10115] usb 4-1: Firmware: major: 243, minor: 76, hardware type: UNKNOWN (30) [ 1116.486097][T10115] usb 4-1: failed to fetch extended address, random address set [ 1116.486116][T10115] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1116.486194][T10115] atusb: probe of 4-1:0.0 failed with error -524 [ 1116.488880][T10115] usb 4-1: USB disconnect, device number 80 [ 1116.491628][T17709] udevd[17709]: setting mode of /dev/bus/usb/004/080 to 020664 failed: No such file or directory [ 1116.491771][T17709] udevd[17709]: setting owner of /dev/bus/usb/004/080 to uid=0, gid=0 failed: No such file or directory 08:04:39 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, &(0x7f00000000c0)=0x98) 08:04:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xfe81, &(0x7f00000001c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 08:04:39 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) 08:04:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 08:04:39 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x2}}], 0x1c) 08:04:39 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 08:04:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8992, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 08:04:39 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) 08:04:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x14, 0x0, &(0x7f0000000140)=0x84) [ 1116.989173][T25934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25934 comm=syz-executor.4 08:04:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:04:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xc}, 0x48) [ 1117.335978][T20060] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1117.727456][T20060] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1117.727494][T20060] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.737027][T20060] usb 4-1: config 0 descriptor?? [ 1118.466141][T20060] usb 4-1: Firmware: major: 243, minor: 76, hardware type: UNKNOWN (30) [ 1118.696230][T20060] usb 4-1: failed to fetch extended address, random address set [ 1118.696260][T20060] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1118.696385][T20060] atusb: probe of 4-1:0.0 failed with error -524 [ 1118.700520][T20060] usb 4-1: USB disconnect, device number 81 08:04:42 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:42 executing program 4: getitimer(0x2, &(0x7f0000001000)) 08:04:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000001300)=""/237) 08:04:42 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) 08:04:42 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000180)) 08:04:42 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 08:04:42 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 08:04:42 executing program 0: stat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 08:04:42 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) [ 1119.209506][ T28] audit: type=1400 audit(1654675482.057:562): avc: denied { getopt } for pid=25954 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 08:04:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8918, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 08:04:42 executing program 1: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0xafaf9ae694f25b9b) 08:04:42 executing program 4: getrusage(0xffffffffffffffff, &(0x7f0000000100)) [ 1119.506051][ T9294] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1119.867174][ T9294] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1119.867196][ T9294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.868537][ T9294] usb 4-1: config 0 descriptor?? [ 1120.606243][ T9294] usb 4-1: Firmware: major: 243, minor: 76, hardware type: UNKNOWN (30) [ 1120.846219][ T9294] usb 4-1: failed to fetch extended address, random address set [ 1120.846249][ T9294] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1120.846377][ T9294] atusb: probe of 4-1:0.0 failed with error -524 [ 1120.853294][ T9294] usb 4-1: USB disconnect, device number 82 08:04:44 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x24, 0x0, &(0x7f0000000140)) 08:04:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000000)=0x62) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 08:04:44 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 08:04:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast1}}}}) 08:04:44 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 08:04:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) 08:04:44 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x80) 08:04:44 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 08:04:44 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000008c0)={'vcan0\x00'}) 08:04:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 08:04:44 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$can_j1939(r0, 0x0, 0xfffffffffffffd31) [ 1121.647245][ T9294] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1122.016008][ T9294] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1122.016030][ T9294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.017654][ T9294] usb 4-1: config 0 descriptor?? [ 1122.746126][ T9294] usb 4-1: Firmware: major: 243, minor: 76, hardware type: UNKNOWN (30) [ 1122.986222][ T9294] usb 4-1: failed to fetch extended address, random address set [ 1122.986252][ T9294] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1122.986374][ T9294] atusb: probe of 4-1:0.0 failed with error -524 [ 1123.015111][ T9294] usb 4-1: USB disconnect, device number 83 08:04:46 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:46 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) 08:04:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}}}) 08:04:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 08:04:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x0) 08:04:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) 08:04:46 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) 08:04:46 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x891f, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:04:46 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8929, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:04:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x82, 0x0, &(0x7f0000000140)=0x84) 08:04:46 executing program 1: getresgid(&(0x7f0000008440), 0x0, 0x0) 08:04:46 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002740)={0x2020}, 0x2020) [ 1123.836120][T20049] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1124.216145][T20049] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1124.216178][T20049] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.217835][T20049] usb 4-1: config 0 descriptor?? [ 1124.956057][T20049] usb 4-1: Firmware: major: 243, minor: 76, hardware type: UNKNOWN (30) [ 1125.196148][T20049] usb 4-1: failed to fetch extended address, random address set [ 1125.196174][T20049] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1125.196286][T20049] atusb: probe of 4-1:0.0 failed with error -524 [ 1125.198638][T20049] usb 4-1: USB disconnect, device number 84 08:04:48 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:48 executing program 5: set_mempolicy(0x5, &(0x7f0000000500)=0x1, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) 08:04:48 executing program 1: set_mempolicy(0x3, &(0x7f0000000180)=0x1, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x400300}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 08:04:48 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4040010, r0, 0x0) 08:04:48 executing program 2: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000340)) 08:04:48 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002740)={0x2020}, 0x2020) 08:04:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005bc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@dstopts={{0x18}}, @dontfrag={{0x14}}], 0x30}}], 0x1, 0x0) 08:04:48 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002740)={0x2020}, 0x2020) 08:04:48 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000002240), 0x10) 08:04:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) [ 1125.699483][ T28] audit: type=1400 audit(1654675488.547:563): avc: denied { create } for pid=26027 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 08:04:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x500, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000014"], 0x480}}], 0x1, 0x0) 08:04:48 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'syzkaller0\x00'}) [ 1126.016202][ T9294] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1126.376053][ T9294] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1126.376088][ T9294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.378205][ T9294] usb 4-1: config 0 descriptor?? [ 1126.896192][ T9294] usb 4-1: Firmware version (0.0) predates our first public release. [ 1126.896221][ T9294] usb 4-1: Please update to version 0.2 or newer [ 1126.936071][ T9294] usb 4-1: Firmware: build óLÊÍ5¹, [ 1127.211205][ T9294] usb 4-1: USB disconnect, device number 85 08:04:50 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:50 executing program 2: setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000000), 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x20032, 0xffffffffffffffff, 0x80000000) 08:04:50 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002740)={0x2020}, 0x2020) 08:04:50 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000140000000000084009"], 0x24}}, 0x0) 08:04:50 executing program 5: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) 08:04:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x18, 0x0}}, {{&(0x7f0000000540)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@rthdr={{0x18}}], 0x18}}], 0x2, 0x0) 08:04:50 executing program 1: add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)='S', 0x1, 0xfffffffffffffffe) 08:04:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0x80000000}], 0x1c) 08:04:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x25, 0x0, &(0x7f0000000140)) 08:04:50 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) 08:04:50 executing program 4: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0) [ 1127.681604][T26051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 08:04:50 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x8, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="190000f500d0cc020000000000000000000000000000000034000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0x8f, &(0x7f00000003c0)=""/143, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xe, 0x0, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1128.005984][T20049] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1128.366124][T20049] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1128.366159][T20049] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.368365][T20049] usb 4-1: config 0 descriptor?? [ 1128.886482][T20049] usb 4-1: Firmware version (0.0) predates our first public release. [ 1128.886549][T20049] usb 4-1: Please update to version 0.2 or newer [ 1128.936136][T20049] usb 4-1: Firmware: build óLÊÍ5¹, [ 1129.212431][T20049] usb 4-1: USB disconnect, device number 86 08:04:52 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0xc482, 0x0) 08:04:52 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020}, 0x2020) 08:04:52 executing program 4: add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)="a7", 0x1, 0xfffffffffffffffb) 08:04:52 executing program 2: syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x121180) 08:04:52 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000040)=""/7, 0x0, 0x800}, 0x20) 08:04:52 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:52 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 08:04:52 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020}, 0x2020) 08:04:52 executing program 2: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x0, 0x84) 08:04:52 executing program 5: socketpair(0x26, 0x5, 0x0, &(0x7f00000001c0)) 08:04:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0x84) [ 1129.696892][ T28] audit: type=1400 audit(1654675492.547:564): avc: denied { append } for pid=26080 comm="syz-executor.5" name="vfio" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vfio_device_t tclass=chr_file permissive=1 08:04:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, 0x0) 08:04:52 executing program 1: socket$pppoe(0x18, 0x1, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) 08:04:52 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020}, 0x2020) 08:04:52 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x4}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}}, 0x0) 08:04:52 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0500140000000000080009"], 0x24}}, 0x0) 08:04:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x4, 0x0, &(0x7f0000000140)=0x84) [ 1129.949540][T26103] netlink: 'syz-executor.5': attribute type 20 has an invalid length. [ 1129.976058][T20049] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1130.366049][T20049] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1130.366085][T20049] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.368316][T20049] usb 4-1: config 0 descriptor?? [ 1130.876196][T20049] usb 4-1: Firmware version (0.0) predates our first public release. [ 1130.876224][T20049] usb 4-1: Please update to version 0.2 or newer [ 1130.916185][T20049] usb 4-1: Firmware: build óLÊÍ5¹, [ 1131.187520][T20049] usb 4-1: USB disconnect, device number 87 08:04:54 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:54 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) 08:04:54 executing program 5: bpf$ITER_CREATE(0xa, 0x0, 0x0) 08:04:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "0046fa", "3631c5eef3cd63cc79afc8854e633076e1da4763a41c020d7b75d9cfba4218b3efcd272502f5f24e7400f52e85831d89620b331ed91bb5a081c9f8fd107e4634feb1c3e465021251e8ebcf0458e7eb1b6eaf8ffd698a9dc9b8ad5758df0ea0f429e76e4405fb6caf60bd395c310be6d1282a0b33e3a4fd35e5fcea14341fadae69c3fcf3cd0301ac240a3cae6cb7542185ad5dc1a61f128dc79a8fb8dce9e73b366d7fafc5288ebbc41c019c5630d090185a1a3509a4577dae487857cae213a76fc5831c0addf0ab99c1598a1064fed0aaa1ef50e09526b377c7541999a97f51459b29c8f2afdbe9af62817f69993c1f9bc1618c78ef577e99f8b730515a1682"}}, 0x110) 08:04:54 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0xb61041, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) 08:04:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 08:04:54 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) 08:04:54 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x7b, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 08:04:54 executing program 4: mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2030, 0xffffffffffffffff, 0x0) 08:04:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "0046fa", "3631c5eef3cd63cc79afc8854e633076e1da4763a41c020d7b75d9cfba4218b3efcd272502f5f24e7400f52e85831d89620b331ed91bb5a081c9f8fd107e4634feb1c3e465021251e8ebcf0458e7eb1b6eaf8ffd698a9dc9b8ad5758df0ea0f429e76e4405fb6caf60bd395c310be6d1282a0b33e3a4fd35e5fcea14341fadae69c3fcf3cd0301ac240a3cae6cb7542185ad5dc1a61f128dc79a8fb8dce9e73b366d7fafc5288ebbc41c019c5630d090185a1a3509a4577dae487857cae213a76fc5831c0addf0ab99c1598a1064fed0aaa1ef50e09526b377c7541999a97f51459b29c8f2afdbe9af62817f69993c1f9bc1618c78ef577e99f8b730515a1682"}}, 0x110) 08:04:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "0046fa", "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"}}, 0x110) 08:04:54 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) [ 1131.945964][ T3684] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1132.326167][ T3684] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1132.326203][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.327848][ T3684] usb 4-1: config 0 descriptor?? [ 1132.836130][ T3684] usb 4-1: Firmware version (0.0) predates our first public release. [ 1132.836149][ T3684] usb 4-1: Please update to version 0.2 or newer [ 1133.165010][ T3684] usb 4-1: USB disconnect, device number 88 08:04:56 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "0046fa", "3631c5eef3cd63cc79afc8854e633076e1da4763a41c020d7b75d9cfba4218b3efcd272502f5f24e7400f52e85831d89620b331ed91bb5a081c9f8fd107e4634feb1c3e465021251e8ebcf0458e7eb1b6eaf8ffd698a9dc9b8ad5758df0ea0f429e76e4405fb6caf60bd395c310be6d1282a0b33e3a4fd35e5fcea14341fadae69c3fcf3cd0301ac240a3cae6cb7542185ad5dc1a61f128dc79a8fb8dce9e73b366d7fafc5288ebbc41c019c5630d090185a1a3509a4577dae487857cae213a76fc5831c0addf0ab99c1598a1064fed0aaa1ef50e09526b377c7541999a97f51459b29c8f2afdbe9af62817f69993c1f9bc1618c78ef577e99f8b730515a1682"}}, 0x110) 08:04:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, 0x0}}], 0x2, 0x0) 08:04:56 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev}], 0x1c) 08:04:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x810) 08:04:56 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020}, 0x2020) 08:04:56 executing program 5: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x14b80, 0x0) 08:04:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "0046fa", "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"}}, 0x110) 08:04:56 executing program 4: socketpair(0x14, 0x0, 0x0, &(0x7f0000000140)) 08:04:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) 08:04:56 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020}, 0x2020) 08:04:56 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000000)={0xa, 0x0, 0x6b5, @loopback}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000000340)=[@hoplimit_2292={{0x14}}, @rthdr={{0x18}}], 0x30}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000440)="82", 0x1}], 0x1}}], 0x2, 0x40) [ 1133.783900][ T28] audit: type=1400 audit(1654675496.627:565): avc: denied { create } for pid=26147 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1133.827555][T26153] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26153 comm=syz-executor.2 [ 1134.051130][ T3684] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1134.426155][ T3684] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1134.426191][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.427786][ T3684] usb 4-1: config 0 descriptor?? [ 1134.946035][ T3684] usb 4-1: Firmware version (0.0) predates our first public release. [ 1134.946064][ T3684] usb 4-1: Please update to version 0.2 or newer [ 1135.240370][ T3684] usb 4-1: USB disconnect, device number 89 08:04:58 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:04:58 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8992, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:04:58 executing program 4: keyctl$dh_compute(0x5, 0x0, 0x0, 0x0, 0x0) 08:04:58 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "0046fa", "3631c5eef3cd63cc79afc8854e633076e1da4763a41c020d7b75d9cfba4218b3efcd272502f5f24e7400f52e85831d89620b331ed91bb5a081c9f8fd107e4634feb1c3e465021251e8ebcf0458e7eb1b6eaf8ffd698a9dc9b8ad5758df0ea0f429e76e4405fb6caf60bd395c310be6d1282a0b33e3a4fd35e5fcea14341fadae69c3fcf3cd0301ac240a3cae6cb7542185ad5dc1a61f128dc79a8fb8dce9e73b366d7fafc5288ebbc41c019c5630d090185a1a3509a4577dae487857cae213a76fc5831c0addf0ab99c1598a1064fed0aaa1ef50e09526b377c7541999a97f51459b29c8f2afdbe9af62817f69993c1f9bc1618c78ef577e99f8b730515a1682"}}, 0x110) 08:04:58 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020}, 0x2020) 08:04:58 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0xfffff800, 0x4) 08:04:58 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "0046fa", "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"}}, 0x110) 08:04:58 executing program 2: socket$inet(0x2, 0x2, 0x2) 08:04:58 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r0) 08:04:58 executing program 5: bpf$ITER_CREATE(0xb, 0x0, 0x0) 08:04:58 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 08:04:58 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "0046fa", "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"}}, 0x110) [ 1136.066104][T10115] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1136.426302][T10115] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1136.426338][T10115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.428421][T10115] usb 4-1: config 0 descriptor?? [ 1136.946113][T10115] usb 4-1: Firmware version (0.0) predates our first public release. [ 1136.946143][T10115] usb 4-1: Please update to version 0.2 or newer [ 1137.238329][T10115] usb 4-1: USB disconnect, device number 90 08:05:00 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:05:00 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 08:05:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x0, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x480}}], 0x1, 0x0) 08:05:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100), 0x10) 08:05:00 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r0, 0x0, "0046fa", "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"}}, 0x110) 08:05:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x6d, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:05:00 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 08:05:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x22, 0x0, &(0x7f0000000140)=0x84) 08:05:00 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r0, 0x0, "0046fa", "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"}}, 0x110) 08:05:00 executing program 2: pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0) 08:05:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback={0xffffff7f00000000}}, 0x1c, 0x0}}], 0x1, 0x0) 08:05:00 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) [ 1138.076201][T10115] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1138.436330][T10115] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1138.436367][T10115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.438607][T10115] usb 4-1: config 0 descriptor?? [ 1138.956098][T10115] usb 4-1: Firmware version (0.0) predates our first public release. [ 1138.956118][T10115] usb 4-1: Please update to version 0.2 or newer [ 1139.257636][T10115] usb 4-1: USB disconnect, device number 91 08:05:02 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:05:02 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x100808c, 0x4) 08:05:02 executing program 0: mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x2042001, 0x0) 08:05:02 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r0, 0x0, "0046fa", "3631c5eef3cd63cc79afc8854e633076e1da4763a41c020d7b75d9cfba4218b3efcd272502f5f24e7400f52e85831d89620b331ed91bb5a081c9f8fd107e4634feb1c3e465021251e8ebcf0458e7eb1b6eaf8ffd698a9dc9b8ad5758df0ea0f429e76e4405fb6caf60bd395c310be6d1282a0b33e3a4fd35e5fcea14341fadae69c3fcf3cd0301ac240a3cae6cb7542185ad5dc1a61f128dc79a8fb8dce9e73b366d7fafc5288ebbc41c019c5630d090185a1a3509a4577dae487857cae213a76fc5831c0addf0ab99c1598a1064fed0aaa1ef50e09526b377c7541999a97f51459b29c8f2afdbe9af62817f69993c1f9bc1618c78ef577e99f8b730515a1682"}}, 0x110) 08:05:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x48) 08:05:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 08:05:02 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@rthdr={{0x18, 0x29, 0x32}}], 0x18}}], 0x2, 0x0) 08:05:02 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 08:05:02 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 08:05:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000140)) 08:05:02 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "0046fa", "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"}}, 0x110) 08:05:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xffffffbe, &(0x7f0000000380)={&(0x7f0000000000)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x30}}, 0x0) [ 1140.075981][ T3684] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1140.446373][ T3684] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1140.446410][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.448615][ T3684] usb 4-1: config 0 descriptor?? [ 1140.946190][ T3684] usb 4-1: Firmware version (0.0) predates our first public release. [ 1140.946220][ T3684] usb 4-1: Please update to version 0.2 or newer [ 1141.247875][ T3684] usb 4-1: USB disconnect, device number 92 08:05:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x480}}], 0x1, 0x0) 08:05:04 executing program 0: syz_clone(0x24188000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 08:05:04 executing program 4: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x5c5}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x9]}, 0x8}) 08:05:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "0046fa", "3631c5eef3cd63cc79afc8854e633076e1da4763a41c020d7b75d9cfba4218b3efcd272502f5f24e7400f52e85831d89620b331ed91bb5a081c9f8fd107e4634feb1c3e465021251e8ebcf0458e7eb1b6eaf8ffd698a9dc9b8ad5758df0ea0f429e76e4405fb6caf60bd395c310be6d1282a0b33e3a4fd35e5fcea14341fadae69c3fcf3cd0301ac240a3cae6cb7542185ad5dc1a61f128dc79a8fb8dce9e73b366d7fafc5288ebbc41c019c5630d090185a1a3509a4577dae487857cae213a76fc5831c0addf0ab99c1598a1064fed0aaa1ef50e09526b377c7541999a97f51459b29c8f2afdbe9af62817f69993c1f9bc1618c78ef577e99f8b730515a1682"}}, 0x110) 08:05:04 executing program 5: keyctl$dh_compute(0x1b, 0x0, 0x0, 0x0, 0x0) 08:05:04 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:05:04 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x480}}], 0x1, 0x0) 08:05:04 executing program 5: keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={'nhpoly1305-neon\x00'}}) 08:05:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000140)) 08:05:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "0046fa", "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"}}, 0x110) 08:05:04 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 08:05:04 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005bc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@dstopts={{0x18}}, @dontfrag={{0x14}}], 0x30}}], 0x1, 0x18090) 08:05:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x480}}], 0x1, 0x0) 08:05:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) 08:05:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "0046fa", "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"}}, 0x110) 08:05:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x7d, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 08:05:04 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000006b80), 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x0) [ 1142.055943][T10115] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1142.108899][ T28] audit: type=1400 audit(1654675504.957:566): avc: denied { ioctl } for pid=26269 comm="syz-executor.2" path="/dev/vfio/vfio" dev="devtmpfs" ino=695 ioctlcmd=0x3b65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vfio_device_t tclass=chr_file permissive=1 [ 1142.141919][T26254] could not allocate digest TFM handle nhpoly1305-neon [ 1142.456069][T10115] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1142.456104][T10115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.458164][T10115] usb 4-1: config 0 descriptor?? [ 1142.976137][T10115] usb 4-1: Firmware version (0.0) predates our first public release. [ 1142.976156][T10115] usb 4-1: Please update to version 0.2 or newer [ 1143.297649][T10115] usb 4-1: USB disconnect, device number 93 08:05:06 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540), 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:05:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "0046fa", "3631c5eef3cd63cc79afc8854e633076e1da4763a41c020d7b75d9cfba4218b3efcd272502f5f24e7400f52e85831d89620b331ed91bb5a081c9f8fd107e4634feb1c3e465021251e8ebcf0458e7eb1b6eaf8ffd698a9dc9b8ad5758df0ea0f429e76e4405fb6caf60bd395c310be6d1282a0b33e3a4fd35e5fcea14341fadae69c3fcf3cd0301ac240a3cae6cb7542185ad5dc1a61f128dc79a8fb8dce9e73b366d7fafc5288ebbc41c019c5630d090185a1a3509a4577dae487857cae213a76fc5831c0addf0ab99c1598a1064fed0aaa1ef50e09526b377c7541999a97f51459b29c8f2afdbe9af62817f69993c1f9bc1618c78ef577e99f8b730515a1682"}}, 0x110) 08:05:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080), &(0x7f0000000140)=0xb0) 08:05:06 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x894c, 0x0) 08:05:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x3c}}, 0x0) 08:05:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x480}}], 0x1, 0x3) 08:05:06 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="ea", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 08:05:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "0046fa", "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"}}, 0x110) 08:05:06 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x40049409, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:05:06 executing program 5: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000480)) 08:05:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@gettaction={0x14}, 0x14}}, 0x0) 08:05:06 executing program 0: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000140)) [ 1144.028543][T26294] can: request_module (can-proto-0) failed. [ 1144.126031][ T3684] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1144.486218][ T3684] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1144.486254][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.489695][ T3684] usb 4-1: config 0 descriptor?? [ 1145.006104][ T3684] usb 4-1: Firmware version (0.0) predates our first public release. [ 1145.006134][ T3684] usb 4-1: Please update to version 0.2 or newer [ 1145.477783][ T3684] usb 4-1: USB disconnect, device number 94 08:05:08 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540), 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:05:08 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x36) 08:05:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "0046fa", "3631c5eef3cd63cc79afc8854e633076e1da4763a41c020d7b75d9cfba4218b3efcd272502f5f24e7400f52e85831d89620b331ed91bb5a081c9f8fd107e4634feb1c3e465021251e8ebcf0458e7eb1b6eaf8ffd698a9dc9b8ad5758df0ea0f429e76e4405fb6caf60bd395c310be6d1282a0b33e3a4fd35e5fcea14341fadae69c3fcf3cd0301ac240a3cae6cb7542185ad5dc1a61f128dc79a8fb8dce9e73b366d7fafc5288ebbc41c019c5630d090185a1a3509a4577dae487857cae213a76fc5831c0addf0ab99c1598a1064fed0aaa1ef50e09526b377c7541999a97f51459b29c8f2afdbe9af62817f69993c1f9bc1618c78ef577e99f8b730515a1682"}}, 0x110) 08:05:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="ea", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 08:05:08 executing program 5: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="cb", 0x1, 0xfffffffffffffffe) 08:05:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000002700)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}}], 0x1, 0x0) 08:05:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts={{0x18}}, @dstopts_2292={{0x18}}, @hoplimit={{0x14, 0x29, 0x34, 0x400}}], 0x48}}], 0x1, 0x0) 08:05:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x7b, 0x0, &(0x7f0000000140)=0x84) 08:05:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "0046fa", "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"}}, 0x110) 08:05:08 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 08:05:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x0, @private}], 0x2c) 08:05:08 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, 0x0) [ 1146.375990][ T3684] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1146.766180][ T3684] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1146.766214][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.768300][ T3684] usb 4-1: config 0 descriptor?? [ 1147.286216][ T3684] usb 4-1: Firmware version (0.0) predates our first public release. [ 1147.286245][ T3684] usb 4-1: Please update to version 0.2 or newer [ 1147.761916][ T3684] usb 4-1: USB disconnect, device number 95 08:05:11 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540), 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:05:11 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x2, 0x0, 0x0) 08:05:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000d80)) 08:05:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}}}) 08:05:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2}}) 08:05:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "0046fa", "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"}}, 0x110) 08:05:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "0046fa", "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"}}, 0x110) 08:05:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x25, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, &(0x7f00000000c0)=0x98) 08:05:11 executing program 5: r0 = add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='x', 0x1, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)="a7", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000640)={0x0, r0, r1}, 0x0, 0x0, 0x0) 08:05:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005bc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hoplimit_2292={{0x14}}, @hopopts={{0x18}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7f}}], 0x48}}], 0x1, 0x0) 08:05:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6, 0x0, 0x0) 08:05:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "0046fa", "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"}}, 0x110) [ 1148.605978][ T3684] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1148.988275][ T3684] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1148.988310][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.990329][ T3684] usb 4-1: config 0 descriptor?? [ 1149.506184][ T3684] usb 4-1: Firmware version (0.0) predates our first public release. [ 1149.506226][ T3684] usb 4-1: Please update to version 0.2 or newer [ 1149.979616][ T3684] usb 4-1: USB disconnect, device number 96 08:05:13 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x2, "18c1"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:05:13 executing program 5: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0xa201, 0x0) 08:05:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000001980)=[@in={0x2, 0x0, @multicast1}], 0x10) 08:05:13 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:13 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000500), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) 08:05:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "0046fa", "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"}}, 0x110) 08:05:13 executing program 5: syz_io_uring_setup(0x5b16, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 08:05:13 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}) 08:05:13 executing program 4: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x9e140, 0x0) 08:05:13 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000004100)={0x60, 0x0, r1}, 0x60) pipe2$watch_queue(&(0x7f0000002080), 0x80) 08:05:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "0046fa", "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"}}, 0x110) 08:05:13 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8991, &(0x7f00000000c0)={'sit0\x00', 0x0}) [ 1150.805944][ T3684] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1151.206162][ T3684] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1151.206184][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.208434][ T3684] usb 4-1: config 0 descriptor?? [ 1151.746178][ T3684] usb 4-1: Firmware version (0.0) predates our first public release. [ 1151.746209][ T3684] usb 4-1: Please update to version 0.2 or newer [ 1152.235170][ T3684] usb 4-1: USB disconnect, device number 97 08:05:15 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x2, "18c1"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:05:15 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x4004001) 08:05:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007d40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0}}], 0x1, 0x0) 08:05:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "0046fa", "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"}}, 0x110) 08:05:15 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000000c0)=0x6, 0x4) 08:05:15 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000200)="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", 0x2000, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:05:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback={0x10}}, 0x1c, 0x0}}], 0x1, 0x0) 08:05:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x8dffffff}}, {{&(0x7f0000000540)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@rthdr={{0x18}}], 0x18}}], 0x2, 0x0) 08:05:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 08:05:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000002740), 0x4) 08:05:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "0046fa", "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"}}, 0x110) 08:05:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) [ 1152.967614][ T28] audit: type=1400 audit(1654675515.817:567): avc: denied { ioctl } for pid=26399 comm="syz-executor.0" path="socket:[112889]" dev="sockfs" ino=112889 ioctlcmd=0xab0a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1153.097017][T10124] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1153.456971][T10124] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1153.456992][T10124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.458595][T10124] usb 4-1: config 0 descriptor?? [ 1153.976227][T10124] usb 4-1: Firmware version (0.0) predates our first public release. [ 1153.976258][T10124] usb 4-1: Please update to version 0.2 or newer [ 1154.458180][T10124] usb 4-1: USB disconnect, device number 98 08:05:17 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x2, "18c1"}, 0x0, 0x0, &(0x7f0000001440), 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:05:17 executing program 0: socketpair(0x29, 0x5, 0x6, &(0x7f0000000040)) 08:05:17 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "0046fa", "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"}}, 0x110) 08:05:17 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x8002, 0x0) 08:05:17 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000140)=0x84) 08:05:17 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$can_j1939(r0, 0x0, 0x0) 08:05:17 executing program 4: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x5c5}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x9]}, 0x8}) 08:05:17 executing program 5: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x311041, 0x0) 08:05:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[], 0x24}}, 0x0) 08:05:17 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "0046fa", "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"}}, 0x110) 08:05:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@dstopts={{0x18}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x30}}], 0x2, 0x0) 08:05:17 executing program 4: socketpair(0x29, 0x2, 0xfffffbff, &(0x7f0000000280)) [ 1155.295951][ T9294] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1155.656113][ T9294] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1155.656148][ T9294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.658323][ T9294] usb 4-1: config 0 descriptor?? [ 1156.166114][ T9294] usb 4-1: Firmware version (0.0) predates our first public release. [ 1156.166156][ T9294] usb 4-1: Please update to version 0.2 or newer [ 1156.651897][ T9294] usb 4-1: USB disconnect, device number 99 08:05:19 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:05:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "0046fa", "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"}}, 0x110) 08:05:19 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x0) 08:05:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x82, 0x0, &(0x7f0000000140)) 08:05:19 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000800), 0x4002, 0x0) 08:05:19 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) 08:05:20 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000800), 0x4002, 0x0) 08:05:20 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept4$inet6(r0, 0x0, 0x0, 0x0) 08:05:20 executing program 0: bpf$ITER_CREATE(0x23, &(0x7f0000000680), 0x8) 08:05:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, 0x0, 0x0) 08:05:20 executing program 4: getresgid(&(0x7f0000008440), &(0x7f0000008480), 0x0) 08:05:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x77, 0x0, 0x0) [ 1157.475988][ T9294] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1157.876076][ T9294] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1157.876112][ T9294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.878241][ T9294] usb 4-1: config 0 descriptor?? [ 1158.416308][ T9294] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1158.676223][ T9294] usb 4-1: Read permanent extended address 2c:b9:35:cd:ca:1e:4c:f3 from device [ 1158.676252][ T9294] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1158.676374][ T9294] atusb: probe of 4-1:0.0 failed with error -524 [ 1158.886292][ T3684] usb 4-1: USB disconnect, device number 100 08:05:22 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:05:22 executing program 4: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000140), 0x48) 08:05:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, 0x0, 0x0) 08:05:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)='*', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e23, 0x0, @private2}, 0x1c, 0x0}}], 0x2, 0x0) 08:05:22 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x73, 0x0, &(0x7f0000000140)=0x84) 08:05:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x4, 0x4) 08:05:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8936, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 08:05:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, 0x0, 0x0) 08:05:22 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 08:05:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x22, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:05:22 executing program 5: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 08:05:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) [ 1159.756123][ T9294] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1160.147162][ T9294] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1160.147199][ T9294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.149246][ T9294] usb 4-1: config 0 descriptor?? [ 1160.666042][ T9294] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1160.886088][ T9294] usb 4-1: Firmware: build óLÊÍ5¹, [ 1161.106176][ T9294] usb 4-1: failed to fetch extended address, random address set [ 1161.106205][ T9294] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1161.106327][ T9294] atusb: probe of 4-1:0.0 failed with error -524 [ 1161.109579][ T9294] usb 4-1: USB disconnect, device number 101 08:05:24 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:05:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0xc, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 08:05:24 executing program 4: add_key$user(&(0x7f0000002bc0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x1}, &(0x7f0000002ac0)="80", 0x1, 0xfffffffffffffffd) 08:05:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "0046fa", "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"}}, 0x110) 08:05:24 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004d00)={0x2020}, 0x2020) 08:05:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20) 08:05:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x73, 0x0, &(0x7f0000000140)) 08:05:24 executing program 0: mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', 0x0, 0xad039, 0x0) 08:05:24 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8902, 0x0) 08:05:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x21, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:05:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "0046fa", "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"}}, 0x110) 08:05:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080), &(0x7f00000001c0)=0x8) [ 1161.987479][T10120] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1162.376112][T10120] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1162.376145][T10120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.378192][T10120] usb 4-1: config 0 descriptor?? [ 1162.896194][T10120] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1163.116320][T10120] usb 4-1: Firmware: build óLÊÍ5¹, [ 1163.326048][T10120] usb 4-1: failed to fetch extended address, random address set [ 1163.326078][T10120] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1163.326191][T10120] atusb: probe of 4-1:0.0 failed with error -524 [ 1163.331384][T10120] usb 4-1: USB disconnect, device number 102 08:05:26 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:05:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "0046fa", "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"}}, 0x110) 08:05:26 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 08:05:26 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') read$FUSE(r0, 0x0, 0x0) 08:05:26 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) 08:05:26 executing program 2: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x80010160) 08:05:26 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000140)=0x3, 0x4) 08:05:26 executing program 4: write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000008340)={0x20}, 0x20) getresgid(&(0x7f0000008440), &(0x7f0000008480), 0x0) 08:05:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8982, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 08:05:26 executing program 0: syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x10200) 08:05:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@rthdr={{0x10}}], 0x18}}], 0x2, 0x0) 08:05:26 executing program 4: sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x0) [ 1164.176025][T10120] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1164.536016][T10120] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1164.536038][T10120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.537555][T10120] usb 4-1: config 0 descriptor?? [ 1165.056061][T10120] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1165.276162][T10120] usb 4-1: Firmware: build óLÊÍ5¹, [ 1165.496037][T10120] usb 4-1: failed to fetch extended address, random address set [ 1165.496066][T10120] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1165.496195][T10120] atusb: probe of 4-1:0.0 failed with error -524 [ 1165.504645][T10120] usb 4-1: USB disconnect, device number 103 08:05:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000340)) 08:05:28 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001680)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000001d80)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x1, 0x0) 08:05:28 executing program 1: r0 = socket$netlink(0x2, 0x3, 0x8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) 08:05:28 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:05:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@rthdr={{0x18}}], 0xf}}], 0x2, 0x0) 08:05:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts={{0x18}}, @dstopts_2292={{0x18}}, @hoplimit={{0x14}}], 0x48}}], 0x1, 0x8000) 08:05:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000480)=0x98) 08:05:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x120) 08:05:28 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x105000) 08:05:28 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000280)=0xffffffffffffff3a) 08:05:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) 08:05:29 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 08:05:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x10, 0x0) 08:05:29 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, 0x0) 08:05:29 executing program 1: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="fe", 0x1, 0xfffffffffffffffd) [ 1166.316543][ T9817] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1166.676074][ T9817] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1166.676095][ T9817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.677634][ T9817] usb 4-1: config 0 descriptor?? [ 1167.196546][ T9817] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1167.436227][ T9817] usb 4-1: failed to fetch extended address, random address set [ 1167.436256][ T9817] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1167.436403][ T9817] atusb: probe of 4-1:0.0 failed with error -524 [ 1167.461289][ T9817] usb 4-1: USB disconnect, device number 104 08:05:30 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:05:30 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8904, 0x0) 08:05:30 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) 08:05:30 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:05:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x2, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x480}}], 0x1, 0x0) 08:05:30 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5452, 0x0) 08:05:30 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 08:05:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) 08:05:30 executing program 1: getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x11, &(0x7f0000000000), 0x0) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) syz_io_uring_setup(0x474e, &(0x7f0000000500)={0x0, 0x5677, 0x8, 0x0, 0x285}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) 08:05:30 executing program 0: socketpair(0x1d, 0x0, 0x6, &(0x7f00000004c0)) 08:05:30 executing program 4: socketpair(0x2, 0x0, 0x0, &(0x7f0000000140)) 08:05:30 executing program 1: syz_io_uring_setup(0x1bff, &(0x7f0000000300)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1168.256031][ T9817] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1168.617517][ T9817] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1168.617538][ T9817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.620165][ T9817] usb 4-1: config 0 descriptor?? [ 1169.136007][ T9817] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1169.386018][ T9817] usb 4-1: failed to fetch extended address, random address set [ 1169.386037][ T9817] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1169.386107][ T9817] atusb: probe of 4-1:0.0 failed with error -524 [ 1169.388397][ T9817] usb 4-1: USB disconnect, device number 105 08:05:32 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x8, "f34c1ecacd35b92c"}, 0x0, 0x0, 0x0, 0x0}) 08:05:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 08:05:32 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x102, 0x0, 0x0) 08:05:32 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'sit0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 08:05:32 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) socketpair(0x27, 0x9, 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) 08:05:32 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:05:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0x2, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) 08:05:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"301a729381efabd05e359a71d193e0f5"}}}}, 0x90) 08:05:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'tunl0\x00', &(0x7f0000000f80)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB='x']}) 08:05:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8901, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 08:05:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8932, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 08:05:32 executing program 2: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) [ 1170.226077][T10115] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1170.586058][T10115] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1170.586093][T10115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.587423][T10115] usb 4-1: config 0 descriptor?? [ 1171.106189][T10115] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1171.346032][T10115] usb 4-1: failed to fetch extended address, random address set [ 1171.346052][T10115] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1171.346144][T10115] atusb: probe of 4-1:0.0 failed with error -524 [ 1171.348859][T10115] usb 4-1: USB disconnect, device number 106 08:05:34 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 08:05:34 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) 08:05:34 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x6c40) 08:05:34 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8930, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:05:34 executing program 2: setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0xfffffffffffffe88) 08:05:34 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:05:34 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:05:34 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000240)) 08:05:34 executing program 2: syz_io_uring_setup(0x474e, &(0x7f0000000500), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) 08:05:34 executing program 1: syz_io_uring_setup(0x474e, &(0x7f0000000500), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) [ 1171.853122][T26613] sctp: [Deprecated]: syz-executor.4 (pid 26613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1171.853122][T26613] Use struct sctp_sack_info instead 08:05:34 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x24}]}, 0x1c}}, 0x0) 08:05:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x18, 0x0, &(0x7f0000000140)) [ 1172.166010][ T9817] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1172.526035][ T9817] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1172.526058][ T9817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.529021][ T9817] usb 4-1: config 0 descriptor?? [ 1173.046140][ T9817] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1173.305971][ T9817] usb 4-1: failed to fetch extended address, random address set [ 1173.305992][ T9817] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1173.306104][ T9817] atusb: probe of 4-1:0.0 failed with error -524 [ 1173.311683][ T9817] usb 4-1: USB disconnect, device number 107 08:05:36 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 08:05:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xfffff52c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}], 0x1c) 08:05:36 executing program 1: mount$fuseblk(&(0x7f0000000240), 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000400)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}}) 08:05:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000100)="cc", 0x1}], 0x2, &(0x7f00000001c0)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x0, 0x1, '\x00', [@pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x28}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x2, 0x200408c4) 08:05:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 08:05:36 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:05:36 executing program 4: modify_ldt$write2(0x11, &(0x7f0000000000)={0x8000}, 0x10) 08:05:36 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bind$xdp(r0, 0x0, 0x0) 08:05:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x71, 0x0, &(0x7f0000000140)=0x84) 08:05:36 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept$inet6(r0, 0x0, 0x0) 08:05:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x82, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:05:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x76, 0x0, &(0x7f0000000140)) [ 1174.115992][ T9817] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1174.476739][ T9817] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1174.476766][ T9817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.478554][ T9817] usb 4-1: config 0 descriptor?? [ 1174.986108][ T9817] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1175.250862][ T9817] usb 4-1: failed to fetch extended address, random address set [ 1175.250881][ T9817] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1175.250954][ T9817] atusb: probe of 4-1:0.0 failed with error -524 [ 1175.253316][ T9817] usb 4-1: USB disconnect, device number 108 08:05:38 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0xcb76a62e}, 0x0) 08:05:38 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x8, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="190000f500d0cc020000000000000000000000000000000034000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0x8f, &(0x7f00000003c0)=""/143, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xe, 0x0, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 08:05:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0x7d) 08:05:38 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 08:05:38 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:05:38 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 08:05:38 executing program 1: sched_rr_get_interval(0x0, &(0x7f00000001c0)) 08:05:38 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x8, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:05:38 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:05:38 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 08:05:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 08:05:38 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:05:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001680)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001d80)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x1, 0x0) 08:05:38 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 08:05:38 executing program 4: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:05:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:05:38 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) [ 1176.056050][ T9817] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1176.476240][ T9817] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1176.476273][ T9817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.478396][ T9817] usb 4-1: config 0 descriptor?? [ 1176.996167][ T9817] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1177.037458][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.037509][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.256206][ T9817] usb 4-1: failed to fetch extended address, random address set [ 1177.256234][ T9817] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1177.256357][ T9817] atusb: probe of 4-1:0.0 failed with error -524 [ 1177.260041][ T9817] usb 4-1: USB disconnect, device number 109 08:05:40 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:05:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x9, 0x0, &(0x7f0000000140)) 08:05:40 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 08:05:40 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) 08:05:40 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:05:40 executing program 4: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:05:40 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:05:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}}}) 08:05:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 08:05:40 executing program 0: r0 = add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000300)={r0}, 0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={'sha384-ssse3\x00'}, &(0x7f00000004c0)="7918", 0x2}) add_key$user(&(0x7f0000002a40), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000380), 0x0, &(0x7f0000000400), 0x0, 0xfffffffffffffffc) 08:05:40 executing program 1: socket$netlink(0x9, 0x3, 0x0) 08:05:40 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1178.066117][T10120] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1178.426133][T10120] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1178.426168][T10120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.428205][T10120] usb 4-1: config 0 descriptor?? [ 1178.946052][T10120] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1179.206059][T10120] usb 4-1: failed to fetch extended address, random address set [ 1179.206078][T10120] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1179.206152][T10120] atusb: probe of 4-1:0.0 failed with error -524 [ 1179.214286][T10120] usb 4-1: USB disconnect, device number 110 08:05:42 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:05:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0), 0x4) 08:05:42 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x24, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 08:05:42 executing program 1: keyctl$dh_compute(0x8, 0x0, 0x0, 0x0, 0x0) 08:05:42 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:05:42 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:05:42 executing program 1: sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) 08:05:42 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, 0x0) 08:05:42 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0xd, 0x0, 0x0) 08:05:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @local, 0x5798}}}, &(0x7f00000001c0)=0x98) 08:05:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0xa, 0x0, 0x0) 08:05:42 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4$inet6(r0, 0x0, 0x0, 0x80800) [ 1179.895484][ T28] audit: type=1400 audit(1654675542.737:568): avc: denied { accept } for pid=26741 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1180.035965][T10115] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1180.436106][T10115] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1180.436140][T10115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.442821][T10115] usb 4-1: config 0 descriptor?? [ 1180.966122][T10115] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1181.226027][T10115] usb 4-1: failed to fetch extended address, random address set [ 1181.226057][T10115] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1181.226180][T10115] atusb: probe of 4-1:0.0 failed with error -524 [ 1181.234843][T10115] usb 4-1: USB disconnect, device number 111 08:05:44 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:05:44 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:05:44 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 08:05:44 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, 0x0, 0x0) 08:05:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x0, 0x1, "18"}, 0x9) 08:05:44 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:05:44 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 08:05:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5411, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 08:05:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000340)=[@in={0x2, 0x0, @private}], 0x10) 08:05:44 executing program 1: socketpair(0x2, 0x0, 0x1000, &(0x7f0000000280)) 08:05:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) 08:05:44 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 1182.046025][T10120] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1182.406164][T10120] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1182.406211][T10120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.408302][T10120] usb 4-1: config 0 descriptor?? [ 1182.926008][T10120] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1183.186183][T10120] usb 4-1: failed to fetch extended address, random address set [ 1183.186212][T10120] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1183.186334][T10120] atusb: probe of 4-1:0.0 failed with error -524 [ 1183.194940][T10120] usb 4-1: USB disconnect, device number 112 08:05:46 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0}) 08:05:46 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) 08:05:46 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 08:05:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000), 0x10) 08:05:46 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:05:46 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 08:05:46 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8911, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:05:46 executing program 4: openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x81, 0x0) 08:05:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback}, 0x2, 0x0}}, {{&(0x7f0000000540)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@rthdr={{0x18}}], 0x18}}], 0x2, 0x0) 08:05:46 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a1, 0x0) 08:05:46 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00'}) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x2}, &(0x7f0000000040)=0x28) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'dummy0\x00', {}, 0x1}) socket$netlink(0x2, 0xa, 0x0) 08:05:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x14, 0x0, &(0x7f0000000140)=0x4) [ 1183.840401][T26797] sctp: [Deprecated]: syz-executor.1 (pid 26797) Use of int in max_burst socket option. [ 1183.840401][T26797] Use struct sctp_assoc_value instead [ 1184.005971][T10115] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1184.366091][T10115] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1184.366114][T10115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.367910][T10115] usb 4-1: config 0 descriptor?? [ 1184.886134][T10115] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1185.146028][T10115] usb 4-1: failed to fetch extended address, random address set [ 1185.146048][T10115] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1185.146138][T10115] atusb: probe of 4-1:0.0 failed with error -524 [ 1185.355954][ T3684] usb 4-1: USB disconnect, device number 113 08:05:48 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0}) 08:05:48 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x628082, 0x0) 08:05:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x84, 0x0, 0x0) 08:05:48 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000080)) 08:05:48 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 08:05:48 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:05:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@rthdr={{0x18, 0x29, 0x3}}], 0x18}}], 0x2, 0x0) 08:05:48 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) 08:05:48 executing program 4: socket$netlink(0xa, 0x3, 0x0) 08:05:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) 08:05:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0xd, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:05:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x2, &(0x7f0000001d40)=[@rthdr={{0x18}}], 0x18}}], 0x2, 0x0) [ 1186.196125][T10120] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1186.556102][T10120] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1186.556141][T10120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.557858][T10120] usb 4-1: config 0 descriptor?? [ 1187.076107][T10120] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1187.336185][T10120] usb 4-1: failed to fetch extended address, random address set [ 1187.336215][T10120] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1187.336338][T10120] atusb: probe of 4-1:0.0 failed with error -524 [ 1187.542352][ T3684] usb 4-1: USB disconnect, device number 114 08:05:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x2, &(0x7f0000001d40)=[@rthdr={{0x18}}], 0x18}}], 0x2, 0x0) 08:05:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x7c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 08:05:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000100)="cc", 0x1}], 0x2, &(0x7f00000001c0)=[@hopopts_2292={{0x18}}], 0x18}}], 0x1, 0x0) 08:05:50 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:05:50 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0}) 08:05:50 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:05:50 executing program 1: socket$inet6(0xa, 0x0, 0xf08) 08:05:50 executing program 4: setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000), 0x8) socketpair(0x0, 0x0, 0x0, &(0x7f0000000340)) 08:05:50 executing program 0: ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) 08:05:51 executing program 1: socketpair(0x18, 0x0, 0x1, &(0x7f00000001c0)) 08:05:51 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 08:05:51 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000001200), 0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={'hmac(sha1)\x00'}}) 08:05:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000400)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000002d80)=ANY=[@ANYBLOB="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"], 0x180}}], 0x1, 0x0) 08:05:51 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg$can_j1939(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 08:05:51 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x0, 0x0) 08:05:51 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 1188.376148][T10120] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1188.736004][T10120] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1188.736037][T10120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.737669][T10120] usb 4-1: config 0 descriptor?? [ 1189.256149][T10120] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1189.516285][T10120] usb 4-1: failed to fetch extended address, random address set [ 1189.516316][T10120] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1189.516443][T10120] atusb: probe of 4-1:0.0 failed with error -524 [ 1189.723773][ T9294] usb 4-1: USB disconnect, device number 115 08:05:53 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x4, "f34c1eca"}, 0x0, 0x0, 0x0, 0x0}) [ 1190.515936][T10115] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1190.905995][T10115] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1190.906017][T10115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.907690][T10115] usb 4-1: config 0 descriptor?? 08:05:53 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:05:53 executing program 0: bpf$ITER_CREATE(0x19, 0x0, 0x0) 08:05:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280), 0x4) 08:05:53 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 08:05:53 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8901, 0x0) 08:05:54 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x4, 0x0, 0x4) 08:05:54 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f00000002c0)) [ 1191.097503][T26870] sctp: [Deprecated]: syz-executor.1 (pid 26870) Use of int in max_burst socket option deprecated. [ 1191.097503][T26870] Use struct sctp_assoc_value instead 08:05:54 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5450, 0x0) 08:05:54 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f00000002c0)) 08:05:54 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1004, 0x1}, 0x48) 08:05:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8912, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) [ 1191.425971][T10115] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1191.686034][T10115] usb 4-1: failed to fetch extended address, random address set [ 1191.686063][T10115] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1191.686172][T10115] atusb: probe of 4-1:0.0 failed with error -524 [ 1191.896737][ T3684] usb 4-1: USB disconnect, device number 116 08:05:55 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x4, "f34c1eca"}, 0x0, 0x0, 0x0, 0x0}) [ 1192.685914][ T3684] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1193.086155][ T3684] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1193.086178][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.087590][ T3684] usb 4-1: config 0 descriptor?? [ 1193.596153][ T3684] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1193.856104][ T3684] usb 4-1: failed to fetch extended address, random address set [ 1193.856124][ T3684] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1193.856198][ T3684] atusb: probe of 4-1:0.0 failed with error -524 [ 1194.062662][ T3684] usb 4-1: USB disconnect, device number 117 08:05:57 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:05:57 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x23}]}, 0x24}}, 0x0) 08:05:57 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x4000, 0x4) 08:05:57 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x108}}, 0x0) 08:05:57 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 08:05:57 executing program 4: add_key$user(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='x', 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000640)={0x0, r0}, 0x0, 0x0, 0x0) 08:05:57 executing program 0: r0 = socket$netlink(0x2, 0xa, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={0x0}}, 0x0) 08:05:57 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8922, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private1}}) 08:05:57 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x801c581f, 0x0) 08:05:57 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8922, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private1}}) 08:05:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x803}, 0x14}}, 0x0) [ 1194.281144][T26907] sit0: mtu greater than device maximum [ 1194.363519][T26915] sit0: mtu greater than device maximum 08:05:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='$'], 0x480}}], 0x1, 0x0) 08:06:00 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x4, "f34c1eca"}, 0x0, 0x0, 0x0, 0x0}) 08:06:00 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @local, 0x8}}}, &(0x7f0000000100)=0x98) 08:06:00 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110a2000000000025000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 08:06:00 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r0, 0x303}, 0x14}}, 0x0) 08:06:00 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 08:06:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @local, 0x8}}}, &(0x7f0000000100)=0x98) 08:06:00 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 08:06:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f0000000140)) 08:06:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003400)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@hopopts_2292={{0x18}}, @hoplimit={{0x14}}], 0x30}}], 0x1, 0x0) 08:06:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 08:06:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) [ 1197.468940][T26943] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26943 comm=syz-executor.0 [ 1197.470720][T26943] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=26943 comm=syz-executor.0 [ 1197.555971][T20060] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1197.916151][T20060] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1197.916185][T20060] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.918292][T20060] usb 4-1: config 0 descriptor?? [ 1198.426946][T20060] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1198.676133][T20060] usb 4-1: failed to fetch extended address, random address set [ 1198.676162][T20060] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1198.676291][T20060] atusb: probe of 4-1:0.0 failed with error -524 [ 1198.884435][T20060] usb 4-1: USB disconnect, device number 118 08:06:02 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x6, "f34c1ecacd35"}, 0x0, 0x0, 0x0, 0x0}) [ 1199.686928][T20060] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1200.060765][T20060] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1200.060803][T20060] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.071829][T20060] usb 4-1: config 0 descriptor?? 08:06:03 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @loopback={0x2}}], 0x1c) 08:06:03 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 08:06:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {0x0, r2}}, 0x18) 08:06:03 executing program 1: ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x0, 'vlan0\x00', {}, 0x14}) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x474e, &(0x7f0000000500)={0x0, 0x5677, 0x8, 0x0, 0x285}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) 08:06:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0x2, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) 08:06:03 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00'}) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x2}, &(0x7f0000000040)=0x28) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'dummy0\x00', {0x4}, 0x1}) socket$netlink(0x2, 0xa, 0x0) 08:06:03 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x4, &(0x7f0000000140), 0x4) 08:06:03 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 08:06:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000003c0)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"5ca737c8d4d3c3acb537825f61317920"}}}}, 0x90) 08:06:03 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x438}}, 0x0) [ 1200.586034][T20060] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1200.846056][T20060] usb 4-1: failed to fetch extended address, random address set [ 1200.846085][T20060] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1200.846215][T20060] atusb: probe of 4-1:0.0 failed with error -524 [ 1201.052466][T10115] usb 4-1: USB disconnect, device number 119 08:06:04 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x6, "f34c1ecacd35"}, 0x0, 0x0, 0x0, 0x0}) [ 1201.855944][ T3684] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1202.236053][ T3684] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1202.236088][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.238249][ T3684] usb 4-1: config 0 descriptor?? [ 1202.755986][ T3684] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1203.016133][ T3684] usb 4-1: failed to fetch extended address, random address set [ 1203.016161][ T3684] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1203.016284][ T3684] atusb: probe of 4-1:0.0 failed with error -524 [ 1203.221910][T10115] usb 4-1: USB disconnect, device number 120 08:06:06 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 08:06:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206050000000000fffff00000000000050001000600000005000500020000000900020073797a31000000000500040000000000110003"], 0x4c}}, 0x0) 08:06:06 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 08:06:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8913, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 08:06:06 executing program 0: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) 08:06:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000002700)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1, r2}}}], 0x28}}], 0x1, 0x0) 08:06:06 executing program 1: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000280)) 08:06:06 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x2, &(0x7f0000000140), 0x4) 08:06:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private}}}}) 08:06:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) 08:06:06 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x6, "f34c1ecacd35"}, 0x0, 0x0, 0x0, 0x0}) [ 1204.016021][ T3684] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1204.436064][ T3684] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1204.436087][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.439359][ T3684] usb 4-1: config 0 descriptor?? [ 1204.946029][ T3684] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1205.206100][ T3684] usb 4-1: failed to fetch extended address, random address set [ 1205.206130][ T3684] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1205.206249][ T3684] atusb: probe of 4-1:0.0 failed with error -524 [ 1205.413128][ T3684] usb 4-1: USB disconnect, device number 121 08:06:09 executing program 0: mq_open(&(0x7f0000000000)='^}$)\x00', 0x0, 0x0, &(0x7f0000000040)) 08:06:09 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 08:06:09 executing program 5: timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @local}}}) 08:06:09 executing program 1: set_mempolicy(0x3, &(0x7f0000000180)=0x1, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000d0601010000000000000000030000050001000700000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)) 08:06:09 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x7, "f34c1ecacd35b9"}, 0x0, 0x0, 0x0, 0x0}) 08:06:09 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:06:09 executing program 4: keyctl$dh_compute(0x3, 0x0, 0x0, 0x0, 0x0) 08:06:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x1b, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:06:09 executing program 5: timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) [ 1206.468415][T27008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 08:06:09 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 08:06:09 executing program 5: timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:09 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') 08:06:09 executing program 4: bpf$ITER_CREATE(0x22, &(0x7f0000000680), 0x8) 08:06:09 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110bd000000000025000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 08:06:09 executing program 4: openat$vcsu(0xffffffffffffff9c, 0x0, 0x480800, 0x0) 08:06:09 executing program 5: timer_create(0x0, &(0x7f0000066000), &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) [ 1206.843536][T10115] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1207.196025][T10115] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1207.196061][T10115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.198227][T10115] usb 4-1: config 0 descriptor?? [ 1207.726013][T10115] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1207.986147][T10115] usb 4-1: failed to fetch extended address, random address set [ 1207.986175][T10115] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1207.986308][T10115] atusb: probe of 4-1:0.0 failed with error -524 [ 1208.193886][T10115] usb 4-1: USB disconnect, device number 122 08:06:11 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x7, "f34c1ecacd35b9"}, 0x0, 0x0, 0x0, 0x0}) 08:06:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'tunl0\x00', 0x0}) 08:06:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}}}) 08:06:11 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 08:06:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000140)) 08:06:11 executing program 4: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x474e, &(0x7f0000000500)={0x0, 0x5677}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) 08:06:11 executing program 0: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x5c5}, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 08:06:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'tunl0\x00', &(0x7f0000000f80)=ANY=[]}) 08:06:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:06:11 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 08:06:11 executing program 4: keyctl$dh_compute(0x10, &(0x7f00000000c0), 0x0, 0x0, 0x0) [ 1209.046026][T20060] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1209.406173][T20060] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1209.406194][T20060] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.407939][T20060] usb 4-1: config 0 descriptor?? 08:06:12 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) [ 1209.934894][T20060] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1210.196002][T20060] usb 4-1: failed to fetch extended address, random address set [ 1210.196031][T20060] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1210.196130][T20060] atusb: probe of 4-1:0.0 failed with error -524 [ 1210.402467][T20060] usb 4-1: USB disconnect, device number 123 08:06:13 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000c0bbbd40b72040158fef000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001680)={0x2c, &(0x7f0000001540)={0x0, 0x0, 0x3, "18c1d7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0x7, "f34c1ecacd35b9"}, 0x0, 0x0, 0x0, 0x0}) 08:06:13 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 08:06:13 executing program 5: timer_create(0x0, &(0x7f0000066000), &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 08:06:13 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) 08:06:13 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540), 0x668103, 0x0) 08:06:13 executing program 1: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 08:06:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x14) 08:06:13 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) 08:06:13 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:13 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8921, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:06:13 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x2, &(0x7f00000000c0)={'sit0\x00', 0x0}) [ 1211.255955][T20049] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1211.646180][T20049] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 1211.646202][T20049] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.647979][T20049] usb 4-1: config 0 descriptor?? [ 1212.156049][T20049] usb 4-1: Firmware: major: 24, minor: 193, hardware type: UNKNOWN (215) [ 1212.416018][T20049] usb 4-1: failed to fetch extended address, random address set [ 1212.416049][T20049] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1212.416207][T20049] atusb: probe of 4-1:0.0 failed with error -524 [ 1212.623834][T20049] usb 4-1: USB disconnect, device number 124 08:06:15 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000500), &(0x7f0000000540)=0x4) 08:06:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 08:06:16 executing program 5: timer_create(0x0, &(0x7f0000066000), &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:16 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711057000000000025000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 08:06:16 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:16 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x4, 0x0, 0x0) 08:06:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0xb80b) 08:06:16 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000400)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000002d80)=ANY=[@ANYBLOB="14000000000000002900000008000000d98c00000000000014"], 0x180}}], 0x1, 0x0) 08:06:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}], 0x18}}], 0x1, 0x8000) 08:06:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:06:16 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x8, 0x4) 08:06:16 executing program 0: add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="bc", 0x1, 0xffffffffffffffff) 08:06:16 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', 0x0}) 08:06:16 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000014"], 0x480}}], 0x1, 0x0) 08:06:19 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"301a729381efabd05e359a71d193e0f5"}}}}, 0x90) 08:06:19 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 08:06:19 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 08:06:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x15, 0x0, 0x0) 08:06:19 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:19 executing program 4: bpf$ITER_CREATE(0x2, &(0x7f0000000680), 0x8) 08:06:19 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8949, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:06:19 executing program 1: keyctl$dh_compute(0x9, 0x0, 0x0, 0x0, 0x0) 08:06:19 executing program 0: mount$fuseblk(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) 08:06:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8930, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 08:06:20 executing program 1: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 08:06:22 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x8, @loopback, 0x3}], 0x1c) 08:06:22 executing program 3: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x2401, 0x0) 08:06:22 executing program 1: socket$netlink(0x10, 0x3, 0x8d44b6d6cbb71f6b) 08:06:22 executing program 0: bpf$ITER_CREATE(0x3, 0x0, 0x0) 08:06:22 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 08:06:23 executing program 0: clock_gettime(0x5, &(0x7f0000000a40)) 08:06:23 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000028c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 08:06:23 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x8, @loopback, 0x3}], 0x1c) 08:06:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)='*', 0x1}, {&(0x7f0000000100)="cc", 0x1}], 0x2, &(0x7f00000001c0)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x0, 0x1, '\x00', [@pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x28}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x2, 0x200408c4) 08:06:23 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000580)={&(0x7f0000000c00)=ANY=[], 0x438}}, 0x0) [ 1220.201667][T27162] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=27162 comm=syz-executor.1 08:06:26 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:26 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 08:06:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) 08:06:26 executing program 3: mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x1a0c5c, 0x0) 08:06:26 executing program 4: bpf$ITER_CREATE(0x13, 0x0, 0x0) 08:06:26 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000"/29, @ANYBLOB="00000000140000000000000029"], 0x480}}], 0x1, 0x0) 08:06:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f00000000c0)=0x98) 08:06:26 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x0, {0x1}}, 0x18) 08:06:26 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0xfffffdef}}, 0x0) 08:06:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f00000000c0)=0x98) 08:06:26 executing program 4: keyctl$dh_compute(0x1a, &(0x7f00000000c0), 0x0, 0x0, 0x0) 08:06:29 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 08:06:29 executing program 4: stat(&(0x7f0000000340)='./file0\x00', 0x0) 08:06:29 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8941, 0x0) 08:06:29 executing program 0: bpf$ITER_CREATE(0xe, 0x0, 0x0) 08:06:29 executing program 2: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:29 executing program 4: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x541b, 0x0) 08:06:29 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x40000100) 08:06:29 executing program 3: socketpair(0x18, 0x0, 0x5, &(0x7f0000000000)) 08:06:29 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x85, 0x0, &(0x7f0000000140)) [ 1226.261317][T27205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27205 comm=syz-executor.3 08:06:29 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a3, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:06:29 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000040), 0x18) 08:06:32 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:32 executing program 3: openat$vfio(0xffffffffffffff9c, &(0x7f0000000140), 0x220002, 0x0) 08:06:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000009000000000000000000000000300002000600034000030000060003400004000006000340000100000c0002"], 0x5c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000140)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:06:32 executing program 1: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\'', 0x1, 0xfffffffffffffffc) 08:06:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x8, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:06:32 executing program 2: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:32 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x105081, 0x0) 08:06:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@rthdr={{0x18, 0x29, 0x39, {0x0, 0x0, 0x2}}}], 0x18}}], 0x2, 0x0) 08:06:32 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x14, 0x0, &(0x7f0000000140)) 08:06:32 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5421, 0x0) 08:06:32 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10000081) [ 1229.392422][ T28] audit: type=1400 audit(1654675592.237:569): avc: denied { write } for pid=27232 comm="syz-executor.1" name="btrfs-control" dev="devtmpfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 08:06:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@rthdr={{0x18, 0x29, 0xfffffff6}}], 0x18}}], 0x2, 0x0) 08:06:35 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:35 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000280)={0x2}, 0x8, 0x0) 08:06:35 executing program 3: getitimer(0x94209588c497df5d, 0x0) 08:06:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x10, 0x0, 0x0) 08:06:35 executing program 0: bpf$ITER_CREATE(0x1b, 0x0, 0x0) 08:06:35 executing program 2: timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:35 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={'sha384-ssse3\x00'}}) 08:06:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006380)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@rthdr={{0x18}}], 0x18}}], 0x1, 0x0) 08:06:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x12, 0x0, 0x0) 08:06:35 executing program 4: mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 08:06:35 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000280), 0x10) 08:06:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000000)) 08:06:38 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:38 executing program 0: setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) 08:06:38 executing program 3: bpf$ITER_CREATE(0x4, 0x0, 0x10) 08:06:38 executing program 1: socket(0x3e, 0x0, 0x0) 08:06:38 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x110) 08:06:38 executing program 2: timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}}}) 08:06:38 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x10, 0x0, &(0x7f0000000140)=0x84) 08:06:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)='*', 0x1}, {&(0x7f0000000100)="cc", 0x1}], 0x2, &(0x7f00000001c0)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x0, 0x1, '\x00', [@pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x28}}, {{&(0x7f0000000200)={0xa, 0x4e23, 0x0, @private2, 0x4}, 0x1c, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x2, 0x200408c4) 08:06:38 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x1c, 0x0, &(0x7f0000000140)) 08:06:38 executing program 2: timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000061c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x10) 08:06:38 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x24, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:06:38 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) 08:06:38 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x40) 08:06:38 executing program 2: timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f0000000540)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c, 0x0}}], 0x1, 0x0) 08:06:38 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 08:06:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x180000) 08:06:38 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x75, 0x0, &(0x7f0000000140)=0x84) 08:06:38 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:38 executing program 2: timer_create(0x0, &(0x7f0000066000), &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:38 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 08:06:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x7b, 0x0, 0x0) 08:06:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x1, 0x0) 08:06:38 executing program 4: mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x106088, 0x0) 08:06:38 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:38 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x40086602, 0x0) 08:06:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000001680)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000001d80)=[@rthdrdstopts={{0x18}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}, r2}}}], 0x40}}], 0x1, 0x0) 08:06:38 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x7d, 0x0, &(0x7f0000000140)) 08:06:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x9, 0x0, 0x0) 08:06:38 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000100)) [ 1236.062528][ T28] audit: type=1400 audit(1654675598.907:570): avc: denied { setattr } for pid=27330 comm="syz-executor.3" path="socket:[115368]" dev="sockfs" ino=115368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 08:06:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8970, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) [ 1238.478063][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.478113][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 08:06:41 executing program 2: timer_create(0x0, &(0x7f0000066000), &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:41 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8940, 0x0) 08:06:41 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000e4ff8cff0008"], 0x24}}, 0x0) 08:06:41 executing program 1: keyctl$dh_compute(0x1e, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x0}) 08:06:41 executing program 0: socket$netlink(0x3, 0x3, 0x0) 08:06:41 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:41 executing program 4: pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) 08:06:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rthdr_2292={{0x18}}], 0x18}}], 0x1, 0x0) 08:06:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x18, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000014"], 0x480}}], 0x1, 0x0) 08:06:41 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffff12) [ 1238.987962][T27350] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 08:06:41 executing program 0: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x5c5}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 08:06:41 executing program 1: modify_ldt$write2(0x11, &(0x7f0000000000)={0x401}, 0x10) 08:06:44 executing program 2: timer_create(0x0, &(0x7f0000066000), &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:44 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) 08:06:44 executing program 0: pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_BMAP(r0, &(0x7f0000002440)={0x18}, 0x18) 08:06:44 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5452, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:06:44 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={'sha512-avx2\x00'}}) 08:06:44 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:44 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$inet6(r0, 0x0, &(0x7f00000003c0)) 08:06:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@rthdr={{0x18, 0xfffffff6}}], 0x18}}], 0x2, 0x0) 08:06:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 08:06:45 executing program 4: r0 = add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='x', 0x1, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='x', 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000040)={0x0, r0, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={'poly1305-generic\x00'}}) 08:06:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x140}}], 0x2, 0x0) 08:06:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140), 0x8) 08:06:48 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89b0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}}}) 08:06:48 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001040)={0x0, 0x303000, 0x800, 0x0, 0x1}, 0x20) 08:06:48 executing program 3: syz_io_uring_setup(0x4a95, &(0x7f0000000500)={0x0, 0x9863}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) 08:06:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140), 0x8) 08:06:48 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000003dc0)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffff001}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000300)="a5", 0x1}], 0x1, &(0x7f00000007c0)=[@rthdr_2292={{0x18}}], 0x18}}], 0x1, 0x0) 08:06:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="ea", 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000440)="82", 0x1}], 0x1}}], 0x2, 0x40) 08:06:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x7, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:06:48 executing program 3: keyctl$dh_compute(0xf, 0x0, 0x0, 0x0, 0x0) 08:06:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, &(0x7f0000000200)) 08:06:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) 08:06:51 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0xd, 0x0, &(0x7f0000000140)=0x4) 08:06:51 executing program 4: getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) 08:06:51 executing program 0: add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000080)="e1", 0x1, 0xfffffffffffffffc) 08:06:51 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x891e, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:06:51 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:51 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) 08:06:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f0000000180)) 08:06:51 executing program 4: mq_open(&(0x7f0000000000)='^}$)\x00', 0x0, 0x0, 0x0) 08:06:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}], 0x18}}], 0x1, 0x0) 08:06:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) [ 1248.306002][T27423] sctp: [Deprecated]: syz-executor.3 (pid 27423) Use of int in maxseg socket option. [ 1248.306002][T27423] Use struct sctp_assoc_value instead 08:06:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005bc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 08:06:54 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:54 executing program 4: write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000008340)={0x20}, 0x20) getresgid(&(0x7f0000008440), &(0x7f0000008480), &(0x7f00000084c0)) 08:06:54 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8948, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:06:54 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x380c2, 0x0) 08:06:54 executing program 3: socketpair(0x18, 0x0, 0xfff, &(0x7f0000000000)) 08:06:54 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:54 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 08:06:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x24}}, 0x0) 08:06:54 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 08:06:54 executing program 1: syz_io_uring_setup(0x474e, &(0x7f0000000500)={0x0, 0x5677}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) 08:06:54 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000040)={0x1d, r2}, 0x18) 08:06:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:06:57 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:06:57 executing program 3: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0xfffffffffffffe51) 08:06:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x88) 08:06:57 executing program 1: bpf$ITER_CREATE(0x4, &(0x7f0000000680), 0x8) 08:06:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x0, 0x64, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x480}}], 0x1, 0x0) 08:06:57 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:06:57 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8906, 0x0) 08:06:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) 08:06:57 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x4}) 08:06:57 executing program 4: socket$netlink(0xa, 0x3, 0x5) 08:06:57 executing program 3: mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x10a600c, 0x0) 08:06:57 executing program 4: bpf$ITER_CREATE(0xa, &(0x7f0000000680), 0x8) 08:07:00 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x80108906, 0x0) 08:07:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 08:07:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) 08:07:00 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) 08:07:00 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:07:00 executing program 0: syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x101001) 08:07:00 executing program 3: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xa4881) 08:07:00 executing program 1: r0 = socket$netlink(0x2, 0xa, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 08:07:00 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000019b40320d812010085de0102030109021b0001000000000904000001bed54c00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) close(r1) 08:07:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="98010000310001"], 0x198}}, 0x0) 08:07:00 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0) [ 1257.631994][T27515] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1257.885972][T20060] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1258.126013][T20060] usb 5-1: Using ep0 maxpacket: 32 [ 1258.246242][T20060] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1258.406047][T20060] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.85 [ 1258.406083][T20060] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.406107][T20060] usb 5-1: Product: syz [ 1258.406124][T20060] usb 5-1: Manufacturer: syz [ 1258.406141][T20060] usb 5-1: SerialNumber: syz [ 1258.411452][T20060] usb 5-1: config 0 descriptor?? [ 1258.433585][T27514] raw-gadget gadget.4: fail, usb_ep_enable returned -22 08:07:03 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:03 executing program 0: add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)="d7", 0x1, 0xffffffffffffffff) 08:07:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@rthdr={{0x18, 0x29, 0x34}}], 0x18}}], 0x2, 0x0) 08:07:03 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8907, 0x0) 08:07:03 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:07:03 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8943, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:07:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000700)={0x420}, 0x420}}, 0x0) 08:07:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x1c, 0x0, &(0x7f0000000340)) 08:07:03 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) 08:07:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 08:07:03 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:07:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x6, 0x0, &(0x7f0000000140)=0x84) 08:07:06 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:06 executing program 4: syz_io_uring_setup(0x9d5, &(0x7f0000000000)={0x0, 0x0, 0x5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f00000000c0)) 08:07:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@rthdr={{0x18}}], 0x7ffffffff000}}], 0x2, 0x0) 08:07:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002100)={'ip_vti0\x00', &(0x7f00000020c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @private}}}}) 08:07:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x0, @dev, 0x80000000}], 0x2c) 08:07:06 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:07:06 executing program 3: bpf$ITER_CREATE(0x9, &(0x7f0000000680), 0x8) 08:07:06 executing program 1: mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x1a0c33, 0x0) 08:07:06 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000340)) 08:07:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, &(0x7f0000000000)=0x98) 08:07:06 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:06 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x0, 'veth0_to_team\x00', {}, 0x20}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0x0, 0x9c97, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x66, 0x0, 0x1, 0x29, 0x0, @local, @private=0xa010100, {[@generic={0x94, 0x6, "2970b454"}, @cipso={0x86, 0x4f, 0xffffffffffffffff, [{0x6, 0x3, 'm'}, {0x5, 0x10, "02c12d3bb4e29553a83a6fac4690"}, {0x0, 0xf, "9496bd1492d21af736c9824d90"}, {0x2, 0x12, "5045d3efa2e49df0112a82a67cfe1e90"}, {0x7, 0x10, "0659a8d23d1ba78bb43b736d814a"}, {0x7, 0x5, "391cef"}]}, @ra={0x94, 0x4}, @generic={0x88, 0x5, "8077c6"}, @end, @timestamp={0x44, 0x8, 0xcc, 0x0, 0x4, [0x3]}, @end]}}}}}) bpf$ITER_CREATE(0x3, &(0x7f0000000680), 0x8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller1\x00'}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1f}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'rose0\x00'}, @L2TP_ATTR_OFFSET={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004081}, 0x4000) pipe2$9p(&(0x7f0000000000), 0x84000) 08:07:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 08:07:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x541b, 0x0) 08:07:06 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:06 executing program 4: socket$pppoe(0x18, 0x1, 0x0) socketpair(0x1d, 0x0, 0x0, &(0x7f00000000c0)) 08:07:06 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x11, 0x0, &(0x7f0000000140)) [ 1263.887146][T27572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27572 comm=syz-executor.0 [ 1263.976924][T27575] can: request_module (can-proto-0) failed. 08:07:07 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:07:07 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8924, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:07:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000022c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}], 0x28}}], 0x1, 0x0) 08:07:07 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f0000000100)) 08:07:07 executing program 4: bpf$ITER_CREATE(0xf, 0x0, 0x0) 08:07:07 executing program 0: socketpair(0x2, 0x0, 0x80000000, &(0x7f0000000140)) 08:07:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@hopopts_2292={{0x18}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 08:07:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 08:07:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xb80b) 08:07:07 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:07 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'\x00', {0x2, 0x0, @multicast2}}) 08:07:08 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:07:08 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 08:07:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x74, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:07:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000aa", @ANYRES32=0x0, @ANYBLOB="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"], 0x480}}], 0x1, 0x0) 08:07:08 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x13, 0x0, 0x0) 08:07:08 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:08 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) clock_gettime(0x4, &(0x7f0000000040)) 08:07:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$can_j1939(r0, &(0x7f0000000080), 0x18) 08:07:08 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="186100000100000000000800040000009500000000000000090b00000400001a185700000c000000000000000000000085200000030000001865000007000000002000000000000018560000080000000000000000000000852000000500009a1991a92d0000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0xe, &(0x7f0000000100)=""/14, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f00000001c0), 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0xff33) 08:07:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a0, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 08:07:08 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 08:07:08 executing program 3: getitimer(0x0, &(0x7f0000001000)) 08:07:09 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:07:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 08:07:09 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0]}}}], 0x38}}], 0x1, 0x0) 08:07:09 executing program 4: pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x9]}, 0x8}) 08:07:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000100)) 08:07:09 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 08:07:09 executing program 3: keyctl$dh_compute(0x18, 0x0, 0x0, 0x0, 0x0) 08:07:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000680), 0x4) 08:07:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) 08:07:09 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:07:09 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 08:07:09 executing program 1: add_key$user(&(0x7f0000002bc0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='x', 0x1, 0xfffffffffffffffc) add_key$user(&(0x7f0000002a40), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000640)={0x0, r0}, 0x0, 0x0, 0x0) 08:07:09 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8922, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:07:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000014c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30}}, 0x90) 08:07:09 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) [ 1266.564035][T27658] sit0: mtu less than device minimum 08:07:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x1a, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:07:10 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_CONN_ID={0x4}]}, 0x24}}, 0x0) 08:07:10 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000400000005"], 0x24}}, 0x0) 08:07:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0x0) 08:07:10 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 08:07:10 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:07:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8902, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 08:07:10 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:07:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000014"], 0x480}}], 0x1, 0x0) 08:07:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 08:07:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x3, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) [ 1267.244701][T27671] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 1267.270707][T27670] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 08:07:10 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 08:07:10 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 08:07:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@tclass={{0x14, 0x29, 0x43, 0xfff}}], 0x18}}], 0x1, 0x0) 08:07:10 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth0_to_team\x00'}) 08:07:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 08:07:10 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8927, &(0x7f00000000c0)={'sit0\x00', 0x0}) [ 1267.357200][T27681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27681 comm=syz-executor.0 08:07:10 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, 0x0, 0x0) 08:07:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}], 0x2c) 08:07:10 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8970, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:07:10 executing program 0: bpf$ITER_CREATE(0x4, 0x0, 0x0) 08:07:10 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 08:07:10 executing program 3: keyctl$dh_compute(0xc, 0x0, 0x0, 0x0, 0x0) 08:07:10 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, 0x0, 0x0) 08:07:10 executing program 4: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 08:07:10 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r0, 0x0) 08:07:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, &(0x7f00000000c0)=0x98) 08:07:10 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, 0x0, 0x0) 08:07:10 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:10 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89b1, &(0x7f00000000c0)={'sit0\x00', 0x0}) [ 1267.683580][ T28] audit: type=1400 audit(1654675630.527:571): avc: denied { map } for pid=27714 comm="syz-executor.0" path="socket:[117778]" dev="sockfs" ino=117778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 08:07:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002380)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@hopopts_2292={{0x18}}, @tclass={{0x14}}], 0x30}}], 0x1, 0x0) 08:07:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 08:07:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 08:07:11 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 08:07:11 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xc, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 08:07:11 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:11 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) 08:07:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:07:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8907, 0x0) [ 1268.421460][T27732] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=27732 comm=syz-executor.4 08:07:11 executing program 1: keyctl$dh_compute(0x1d, 0x0, 0x0, 0x0, 0x0) 08:07:11 executing program 0: socket$xdp(0x2c, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000140), 0x80) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@int=0x4, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x8}, 0x10) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000200), &(0x7f0000000180)=0x80) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) 08:07:11 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:11 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5460, 0x0) 08:07:11 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) 08:07:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) [ 1268.569040][T27749] sctp: [Deprecated]: syz-executor.0 (pid 27749) Use of int in max_burst socket option deprecated. [ 1268.569040][T27749] Use struct sctp_assoc_value instead 08:07:12 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:12 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 08:07:12 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c00)=ANY=[], 0x438}}, 0x0) 08:07:12 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 08:07:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) 08:07:12 executing program 5: bpf$PROG_LOAD(0x5, 0xffffffffffffffff, 0x0) 08:07:12 executing program 1: mount$fuseblk(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}}) 08:07:12 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="98010000310001"], 0x198}}, 0x0) 08:07:12 executing program 5: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200), 0x10540, 0x0) 08:07:12 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x1000, 0x4) 08:07:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000290000003900000000000000000000280100000000000029"], 0x140}}], 0x2, 0x0) 08:07:12 executing program 1: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000a, 0x11, r0, 0x0) 08:07:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x8, @loopback}], 0x1c) 08:07:12 executing program 5: setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000000), 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20032, 0xffffffffffffffff, 0x0) 08:07:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:07:12 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:12 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}], 0x1c) [ 1269.409280][T27774] netlink: 388 bytes leftover after parsing attributes in process `syz-executor.0'. 08:07:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)='*', 0x1}, {&(0x7f0000000100)="cc", 0x1}], 0x2, &(0x7f00000001c0)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x0, 0x1, '\x00', [@pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x28}}, {{0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x2, 0x200408c4) 08:07:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0x6, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}}, 0x0) 08:07:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x11, 0x0, &(0x7f0000000140)=0x84) 08:07:12 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:12 executing program 3: pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_BMAP(r0, 0x0, 0x0) 08:07:12 executing program 5: keyctl$dh_compute(0x7, &(0x7f00000000c0), 0x0, 0x0, 0x0) 08:07:12 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fstat(r0, &(0x7f0000000480)) 08:07:12 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:07:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x84, 0x0, &(0x7f0000000140)) 08:07:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) 08:07:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@flowinfo={{0x14}}, @rthdr={{0x18}}], 0x30}}], 0x2, 0x0) 08:07:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) 08:07:12 executing program 4: keyctl$dh_compute(0xe, &(0x7f00000000c0), 0x0, 0x0, 0x0) 08:07:12 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) 08:07:12 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x891d, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:07:13 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x443, 0x0) 08:07:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x3, 0x0, &(0x7f0000000140)) 08:07:13 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, &(0x7f00000000c0)=0x98) 08:07:13 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:13 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) setpriority(0x0, 0xffffffffffffffff, 0x401) getresuid(&(0x7f0000000d40), 0x0, &(0x7f0000000dc0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000000d67) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') 08:07:13 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) recvmsg$can_j1939(r0, 0x0, 0x0) 08:07:13 executing program 4: keyctl$dh_compute(0x16, 0x0, 0x0, 0x0, 0x0) 08:07:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x83, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:07:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000005c0)=ANY=[@ANYRESHEX], 0xdb) 08:07:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0xf}}], 0x1, 0x0) 08:07:13 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private1}}) 08:07:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000000)=""/218, &(0x7f0000000100)=0xda) 08:07:13 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}], 0x10) 08:07:13 executing program 3: mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x20032, 0xffffffffffffffff, 0x0) 08:07:13 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00'}) 08:07:14 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0xd, 0x0, &(0x7f0000000140)=0x84) 08:07:14 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8995, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:07:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @mcast1, @private2}}) 08:07:14 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:14 executing program 0: mq_open(&(0x7f0000000040)='%!\x00', 0x0, 0x0, 0x0) 08:07:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32], 0xde) 08:07:14 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x80108907, 0x0) 08:07:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback={0x8dffffff00000000}}, 0x1c, 0x0}}], 0x1, 0x0) 08:07:14 executing program 3: mount$fuseblk(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) 08:07:14 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x24}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}}, 0x0) 08:07:14 executing program 4: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xf91c9c487c5fca0a, 0x0) 08:07:14 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0) 08:07:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 08:07:14 executing program 4: syz_open_dev$dri(&(0x7f0000000200), 0x8000000000000000, 0x0) 08:07:15 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 08:07:15 executing program 0: bpf$ITER_CREATE(0x15, &(0x7f0000000680), 0x8) 08:07:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:07:15 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000000c0)) 08:07:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 08:07:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000), 0x8) 08:07:15 executing program 0: mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x1a1c73, 0x0) 08:07:15 executing program 5: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) 08:07:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, &(0x7f0000000080)) 08:07:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x6, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) 08:07:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:07:15 executing program 0: keyctl$dh_compute(0x1a, 0x0, 0x0, 0x0, 0x0) 08:07:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0xbe453ab3b88872c3}, 0x14}}, 0x0) 08:07:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000340)=0x1e) 08:07:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:07:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)=0x84) 08:07:16 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 08:07:16 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8) 08:07:16 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000)=0x10, 0x4) 08:07:16 executing program 4: keyctl$dh_compute(0x17, &(0x7f0000000640), 0x0, 0x0, 0x0) 08:07:16 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 08:07:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:07:16 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000), 0x4) 08:07:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts={{0x18}}, @dstopts_2292={{0x18}}, @hoplimit={{0x14}}], 0x48}}], 0x1, 0x8000) 08:07:16 executing program 4: socket$inet6_sctp(0xa, 0xb, 0x84) 08:07:16 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 08:07:17 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 08:07:17 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000009340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000005940)=[@hopopts={{0x28, 0x29, 0x36, {0x0, 0x1, '\x00', [@calipso={0x7, 0x8}]}}}], 0x28}}], 0x1, 0x20004000) 08:07:17 executing program 3: sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:07:17 executing program 0: socket(0x28, 0x0, 0x6) 08:07:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@rthdr={{0x18, 0x29, 0x43}}], 0x18}}], 0x2, 0x0) 08:07:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x0, 0xfe, '\x00', [@generic={0x0, 0x3e, "7930b93fc0c7ee343b84aaa052a0150f7dd4a431867b0098a144a7d2215a4ca2fb0bb79e9e398c90d4f7a63c5cd91582670e2b09b299717a0a57d54b31e6"}, @ra, @enc_lim, @jumbo, @jumbo, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @local}, @generic={0x0, 0x778, "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"}]}, 0x800) 08:07:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}], 0x10) 08:07:17 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000000)={0xa, 0x0, 0x6b5, @loopback}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000000340)=[@hoplimit_2292={{0x14}}, @rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x7, 0x0, [@mcast1]}}}], 0x40}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000440)="82", 0x1}], 0x1}}], 0x2, 0x40) 08:07:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0xb, 0x0, &(0x7f0000000140)) 08:07:17 executing program 3: sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:07:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', 0x0}) 08:07:17 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) 08:07:18 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:18 executing program 3: sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:07:18 executing program 0: setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000000), 0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000d80)) 08:07:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x7c, 0x0, &(0x7f0000000140)=0x84) 08:07:18 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0}) 08:07:18 executing program 4: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fstat(r0, &(0x7f00000000c0)) 08:07:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) 08:07:18 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:07:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)='F', 0x1}], 0x1}}], 0x1, 0x4000) 08:07:18 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:07:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:07:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x7b, 0x0, &(0x7f0000000140)) 08:07:19 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:19 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, 0x0, 0xffffffffffffff45) 08:07:19 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:07:19 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 08:07:19 executing program 4: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x27a980, 0x0) 08:07:19 executing program 5: socketpair(0x22, 0x0, 0x1, &(0x7f0000000080)) 08:07:19 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x40086602, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:07:19 executing program 5: mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x8cffffff, &(0x7f0000000480)) 08:07:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0) 08:07:19 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) 08:07:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0xb, 0x6, 0x101}, 0x14}}, 0x0) 08:07:19 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000004000000"], 0x24}}, 0x0) [ 1276.400955][T28017] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 08:07:19 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @private=0xa010101}], 0x2c) 08:07:19 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x0, 0x0, 0x0, 0x146c}, 0x48) 08:07:19 executing program 4: memfd_create(&(0x7f00000000c0)='7dev/btrfF\x89c\x81\x00tr\x85l\x00', 0x2) 08:07:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0) 08:07:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x24}}, 0x0) 08:07:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0) 08:07:19 executing program 4: bpf$ITER_CREATE(0x12, 0x0, 0x0) 08:07:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0xf}}], 0x1, 0x0) 08:07:20 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x2) 08:07:20 executing program 1: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:20 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, &(0x7f00000000c0)=0x98) 08:07:20 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 08:07:20 executing program 5: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) 08:07:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 08:07:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x1, 0x0) 08:07:20 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 08:07:20 executing program 1: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:20 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) 08:07:20 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x75, 0x0, 0x0) 08:07:20 executing program 0: r0 = socket$netlink(0x2, 0x3, 0x16) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={0x0, 0xd0}}, 0x0) 08:07:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 08:07:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000), 0x4) 08:07:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, &(0x7f0000000180)=0x98) 08:07:21 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 08:07:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 08:07:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x75, 0x0, 0x0) 08:07:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x23, 0x0, 0x0) 08:07:21 executing program 0: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x474e, &(0x7f0000000500)={0x0, 0x5677, 0x8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) 08:07:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {0x0, r1}}, 0x18) 08:07:21 executing program 5: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) 08:07:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 08:07:21 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000009340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 08:07:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, &(0x7f00000000c0)=0x98) 08:07:21 executing program 0: getgroups(0x1, &(0x7f0000004740)=[0xffffffffffffffff]) 08:07:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 08:07:22 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 08:07:22 executing program 5: socketpair(0x1e, 0x0, 0x401, &(0x7f0000000080)) 08:07:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8904, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 08:07:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', 0x0}) 08:07:22 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8e014, r0, 0x0) 08:07:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 08:07:22 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8990, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:07:22 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a0, 0x0) 08:07:22 executing program 4: keyctl$dh_compute(0xb, 0x0, 0x0, 0x0, 0x0) 08:07:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) 08:07:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:07:22 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) 08:07:23 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:23 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0), &(0x7f0000000140)=0xc) 08:07:23 executing program 5: r0 = socket$netlink(0x2, 0x3, 0x13) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'ipvlan0\x00'}) 08:07:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:07:23 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) 08:07:23 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x4020940d, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:07:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:07:23 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') fstat(r0, &(0x7f00000066c0)) 08:07:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x8, 0x5, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1280.806033][T28126] 8021q: VLANs not supported on ipvlan0 08:07:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005bc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x18090) 08:07:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x4, 0x6, 0x101}, 0x14}}, 0x0) 08:07:23 executing program 5: keyctl$dh_compute(0x1e, 0x0, 0x0, 0x0, 0x0) [ 1280.984046][ T28] audit: type=1400 audit(1654675643.827:572): avc: denied { getattr } for pid=28141 comm="syz-executor.0" path="pid:[4026532835]" dev="nsfs" ino=4026532835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 08:07:24 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:24 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 08:07:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c, 0x0}}], 0x1, 0x0) 08:07:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x4, 0x6, 0x101}, 0x14}}, 0x0) 08:07:24 executing program 5: socket$netlink(0x11, 0x3, 0x5) 08:07:24 executing program 0: setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) 08:07:24 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80) 08:07:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x4, 0x6, 0x101}, 0x14}}, 0x0) 08:07:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x15, 0x0, &(0x7f0000000140)) 08:07:24 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002b40)={0x2020}, 0x2020) 08:07:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x500}}, {{&(0x7f0000000540)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@rthdr={{0x18}}], 0x18}}], 0x2, 0x0) 08:07:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x480}}], 0x1, 0x0) 08:07:25 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8916, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 08:07:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000003dc0)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000300)="a5", 0x1}], 0x1}}], 0x1, 0x0) 08:07:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005bc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@dstopts={{0x18}}], 0x18}}], 0x1, 0x0) 08:07:25 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) 08:07:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x100) 08:07:25 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = getpgid(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x106, 0x8}}, 0x20) 08:07:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100), 0x4) 08:07:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8923, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 08:07:25 executing program 3: keyctl$dh_compute(0xe, 0x0, 0x0, 0x0, 0x0) 08:07:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x500, &(0x7f0000001d40)=[@rthdr={{0x18}}], 0x18}}], 0x2, 0x0) 08:07:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 08:07:26 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:26 executing program 3: mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20032, 0xffffffffffffffff, 0x0) 08:07:26 executing program 4: memfd_create(&(0x7f0000000180)='\xce\x00', 0x5) 08:07:26 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a2, &(0x7f00000000c0)={'sit0\x00', 0x0}) 08:07:26 executing program 0: r0 = add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='x', 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r0}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'blake2s-224\x00'}}) 08:07:26 executing program 1: keyctl$dh_compute(0x16, &(0x7f00000000c0), 0x0, 0x0, 0x0) 08:07:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 08:07:26 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x7ffffffff000) 08:07:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007880)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback={0x10000000000}}, 0x1c, 0x0}}], 0x1, 0x0) 08:07:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private, {[@lsrr={0x83, 0x3}]}}}}}) 08:07:26 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000002240)='ns/user\x00') 08:07:26 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 08:07:26 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000440)={&(0x7f0000000080)=@isdn, 0x80, 0x0}, 0x0) 08:07:26 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x34000}, 0x0) 08:07:26 executing program 0: keyctl$dh_compute(0x17, &(0x7f00000000c0), 0x0, 0x4, &(0x7f0000000340)={0x0, &(0x7f0000000280)="a306a4ccce6c2f90da06c31e06d79f07c3cce68c2b9e6326b5e5cb7c343102b569ca5c31ec932302d3020f904fc2c59d865c52e71b9f2979a22309c61d118ece5e", 0x41}) 08:07:26 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8903, 0x0) 08:07:26 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) fstat(r0, &(0x7f0000000100)) 08:07:26 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:26 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000040000000500c6280000000008"], 0x24}}, 0x0) 08:07:26 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}, 0x2}, 0x0) 08:07:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1004, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 08:07:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, &(0x7f00000000c0)=0x98) 08:07:26 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:26 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0) 08:07:27 executing program 3: keyctl$dh_compute(0x13, 0x0, 0x0, 0x0, 0x0) 08:07:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080), &(0x7f0000000040)=0x4) 08:07:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffed6, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) 08:07:27 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:27 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8912, 0x0) 08:07:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8903, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) 08:07:27 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:27 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000000180), &(0x7f00000001c0)=""/4096, 0x1000, &(0x7f0000001200)={0x0}) 08:07:27 executing program 0: socket$pppoe(0x18, 0x1, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000000c0)) 08:07:27 executing program 5: r0 = add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='x', 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000640)={0x0, r0}, 0x0, 0x0, 0x0) 08:07:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:07:27 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:27 executing program 3: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4d0c58dbaf8e9928) 08:07:27 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x10, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}}, 0x0) 08:07:27 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f0000000c40)) 08:07:27 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001040)={0x0, 0x303000, 0x800}, 0x20) 08:07:27 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) [ 1285.089380][T28268] serio: Serial port pts0 08:07:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004f40)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x1, 0x0) 08:07:28 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:28 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file0\x00') 08:07:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:07:28 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6685d4982a83b71b906769e737201ac6b7a7804454156569cbf3a5be811debc957b5831b89b59d703e748c7c", 0x10}, 0x48, 0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r2, 0x0, 0x7ffff000) syz_open_dev$tty1(0xc, 0x4, 0x1) open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) [ 1285.221621][T28288] syz-executor.0 (pid 28288) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1285.281061][T28288] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1285.281359][T28288] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload 08:07:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:07:28 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:28 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:28 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file0\x00') [ 1285.305693][T28288] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1285.339668][ T3634] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1285.339821][ T3634] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload 08:07:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:07:28 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file0\x00') [ 1285.340031][ T3634] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1285.447270][T28303] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1285.447481][T28303] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1285.448820][T28303] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload 08:07:28 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:07:28 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file0\x00') 08:07:28 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) [ 1285.475818][ T3634] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1285.551715][T28311] serio: Serial port pts0 08:07:28 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') [ 1285.678457][T28319] serio: Serial port pts1 [ 1285.825694][T28298] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1285.978939][T28298] fscrypt: AES-128-CBC-ESSIV using implementation "essiv(cbc-aes-aesni,sha256-avx2)" [ 1285.984092][ T28] audit: type=1804 audit(1654675648.827:573): pid=28305 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1339204997/syzkaller.MRQ9lW/1828/file0/bus" dev="sda1" ino=1160 res=1 errno=0 08:07:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:07:28 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:28 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) unlink(&(0x7f0000000280)='./file0\x00') 08:07:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:07:28 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) [ 1285.984125][ T28] audit: type=1804 audit(1654675648.827:574): pid=28310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir1339204997/syzkaller.MRQ9lW/1828/file0/bus" dev="sda1" ino=1160 res=1 errno=0 [ 1285.984150][ T28] audit: type=1800 audit(1654675648.827:575): pid=28305 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1160 res=0 errno=0 08:07:29 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) unlink(&(0x7f0000000280)='./file0\x00') [ 1285.984173][ T28] audit: type=1804 audit(1654675648.827:576): pid=28298 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir1339204997/syzkaller.MRQ9lW/1828/file0/bus" dev="sda1" ino=1160 res=1 errno=0 08:07:29 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:29 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) unlink(&(0x7f0000000280)='./file0\x00') [ 1285.984196][ T28] audit: type=1800 audit(1654675648.827:577): pid=28310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1160 res=0 errno=0 [ 1286.140202][T28353] serio: Serial port pts1 [ 1286.141390][T28354] serio: Serial port pts0 [ 1286.184100][T28361] serio: Serial port pts2 08:07:29 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:29 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:29 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:29 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:07:29 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) [ 1286.472924][T28389] serio: Serial port pts0 [ 1286.497096][T28390] serio: Serial port pts1 08:07:29 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 08:07:29 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:29 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:29 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 08:07:29 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:29 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1287.016241][T28408] serio: Serial port pts1 08:07:29 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:29 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:29 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:30 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) 08:07:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 08:07:32 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:32 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:32 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:32 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) [ 1289.524847][T28439] serio: Serial port pts0 [ 1289.532523][ T28] audit: type=1400 audit(1654675652.377:578): avc: denied { remount } for pid=28432 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 08:07:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 08:07:32 executing program 0: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:32 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:32 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:32 executing program 0: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:32 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:32 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1290.081284][T28452] serio: Serial port pts1 08:07:35 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:35 executing program 0: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:35 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:35 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0) 08:07:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) [ 1292.584112][T28468] overlayfs: failed to resolve './file1': -2 [ 1292.633554][T28472] serio: Serial port pts0 08:07:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 08:07:35 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:35 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:35 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:35 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:35 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:36 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1293.077851][T28481] overlayfs: failed to resolve './file1': -2 [ 1293.089343][T28483] overlayfs: failed to resolve './file1': -2 08:07:36 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:36 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1293.184866][T28489] overlayfs: failed to resolve './file1': -2 [ 1293.187249][T28487] serio: Serial port pts1 [ 1293.207568][T28491] overlayfs: failed to resolve './file1': -2 08:07:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) tkill(r2, 0x13) 08:07:38 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:38 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1295.673173][T28503] overlayfs: failed to resolve './file1': -2 [ 1295.705263][T28505] serio: Serial port pts0 08:07:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) tkill(r2, 0x13) 08:07:38 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:38 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0) 08:07:38 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:38 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:39 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:39 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:39 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1296.187874][T28519] serio: Serial port pts1 08:07:39 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) tkill(r2, 0x13) 08:07:41 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:41 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1298.774865][T28538] serio: Serial port pts0 08:07:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) tkill(r2, 0x13) 08:07:42 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:42 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0) 08:07:42 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:42 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:42 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:42 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:42 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:42 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') [ 1299.285243][T28553] serio: Serial port pts1 [ 1299.917964][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.918022][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 08:07:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) tkill(r2, 0x13) 08:07:44 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:44 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') [ 1301.823694][T28572] serio: Serial port pts0 08:07:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) tkill(r2, 0x13) 08:07:45 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:45 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 08:07:45 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:45 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:45 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000280)='./file0\x00') 08:07:45 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(0x0) unlink(&(0x7f0000000280)='./file0\x00') [ 1302.320526][T28586] serio: Serial port pts1 08:07:45 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:45 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1302.471818][ T3634] fscrypt_msg: 27 callbacks suppressed [ 1302.471837][ T3634] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1302.471967][ T3634] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1302.472165][ T3634] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload 08:07:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:07:47 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(0x0) unlink(&(0x7f0000000280)='./file0\x00') 08:07:47 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1304.872806][ T3634] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1304.872941][ T3634] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1304.873159][ T3634] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1304.912466][T28605] serio: Serial port pts0 08:07:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:07:48 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:48 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 08:07:48 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(0x0) unlink(&(0x7f0000000280)='./file0\x00') 08:07:48 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x13) 08:07:48 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(0x0) [ 1305.350063][T28617] serio: Serial port pts0 [ 1305.364889][T28620] serio: Serial port pts1 [ 1305.391867][ T3634] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload 08:07:48 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:48 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:48 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(0x0) [ 1305.392004][ T3634] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1305.392208][ T3634] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload 08:07:48 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') unlink(0x0) [ 1305.469555][ T3634] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload 08:07:48 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:07:51 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:51 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:51 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 08:07:51 executing program 5: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x13) [ 1308.440556][T28647] serio: Serial port pts0 08:07:51 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc0080000, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)) 08:07:51 executing program 5: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1308.459779][T28651] serio: Serial port pts1 08:07:51 executing program 1: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:51 executing program 1: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:51 executing program 5: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:51 executing program 1: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:07:54 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)='-0', 0x20000282}], 0x1) 08:07:54 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:54 executing program 2: setrlimit(0x0, &(0x7f0000000380)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 08:07:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x13) 08:07:54 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1311.527354][T28680] serio: Serial port pts0 [ 1311.547633][T28685] serio: Serial port pts1 08:07:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)='-0', 0x20000282}], 0x1) 08:07:54 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:54 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:07:54 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x13) 08:07:57 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000080)='D', 0xfffff, 0x0, 0x0, 0x0) 08:07:57 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:57 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:07:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) [ 1314.562840][T28719] serio: Serial port pts0 08:07:57 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1314.587012][T28722] serio: Serial port pts1 08:07:57 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:57 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:07:57 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:07:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:07:57 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x13) 08:08:00 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:00 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:00 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000d80)={&(0x7f0000000c40), 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10}, 0x10}}, 0x0) 08:08:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ee9000/0x1000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_GET_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000ee8000/0x2000)=nil}) [ 1317.648056][T28763] serio: Serial port pts0 08:08:00 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:00 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1317.746515][T28771] serio: Serial port pts1 08:08:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:00 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/nfsfs\x00') 08:08:00 executing program 0: r0 = getpid() syz_open_procfs$namespace(r0, 0x0) syz_open_procfs$namespace(r0, 0x0) 08:08:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x13) 08:08:03 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) 08:08:03 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:03 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, 0x0) [ 1320.710751][T28806] serio: Serial port pts0 08:08:03 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:03 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1320.803015][T28816] serio: Serial port pts1 08:08:03 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18020000e2ffffff000000000000000085000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d49631979a42d6884ec11ce1413ac30e00bd0081f8504e19a517bdc69676520e98a263345e44d5187b3c4d86abeb12303ff139fe0d0020000d604000000670000008aff66d6b3181ffc1d62a3954c11c27839dc007c4d296e7359ea79a75dd098bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d2464ef3c6a7def8bad3ca6e3abdb2dfc61696e340bb8e2a093adc57196b40def3858ef569147fa4108328392d322ab4df10a2f69a6bdf7257d327070e42410f57466f59aea2544047d6d8ac442e0000000000ee16c729300d230180000000000000a87db3670bba302085a22b5a8b051dc254ed5290a8cd8470e776d6b80630d6cbde49b29a6cb5f4fc00a4db9f370e5fe57238aeada5acf3209a08439f1ff01ffbe5b57922b6f6c67e02aa6d7760525b595fe1f697bc114ed1778e97a3f0295f946974cfb458be2a34cf924dc37b758fbf17a76f3547497aba5086e30ec8a57c814382ffab045ca077a9d15251875432e74b54afaf4985683c229ff92be0dade95ae7b68136b0046d535dd39c0f35469869e9b342b953f81447e6b9e522d62b1e6ffdaab304f134306335fc7a44195254b45a6c1312a13696c7202df5f764713504f94c5e00000e54e9072a22d91744a332e2fa806e63c5cd98a8569a6d6bcfb0000002cf6c75ac63f04af77c98a1459ab1664885173b2b7130eae67e0ebe380d0f648713e68153579c02d71c58d147b00821ab9a6475b31e1ebf1369afe98682efbf3983f283f2faf8f40e3992774814d63c933912dd0c6908149cb79c5cb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83df998a7469426ec8b0000000000000010ff2cd18bdd8ad0983bc90770bbd26a82b9d99d17c02297b523c47ef8c33400e90d3fbe011904ff782ca00edf8e47a71bcc738ef636d32b01933556f9afe772cd45af8aeffe2753088e02ca6bb2feecf0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b506380591a8c48e537dd659a7418c1e122bd4c219ff5a679eec4600e99f017246dc0c18a30160f2ac54f842e3be1c95b15175d0e664beb126000e96549e1a1208c686edb475b705e8a9515c96f4fc6b3c925ea404edbb3845111aed1637ec3890f1de61026dc805a05fa626c6618580fd6ce9eac602c1756f6d105671241d48a25989e01eae489ec7052f8ed72c336c7a8aa63999ee1f47ce5cb736577bea52b6dbbd56d222659480e82c6f84d2033d9d1b597c54ce1822d14b7c7699b9d54f5f11f2e7fdc7557515eb70212e8701e94e7b42dc7294b917f2d21dd474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f54cf881f606b381e4803b500000000000020000000004a2357ba5f6000de1cfa88b7165dcfcf2aaee86d48f05b5ae4fc2bbc908fdb686d5da2da1ac8bab2c153ea923c19e6cb723c1923b3eea2d73e136dff383c9fbbac53dfdcb1a68c98d8e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01f9f2772e5fa454d68d90677d8de36c3215d2ff3cfadcf65eb92adc6c624bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a128c76629a362ee9cc624ec454b90200fd9603f96908bddc1450360d6fd25cbc35345f89215bda856002f40af6b6805a01e7287eab5dd849010480b38ff07d881e833617fe25f14d4e80366b7da96d6b17a8a1ec26ff5893287a4a38facae2c16908d93e79980293b62d431a4ad3b5ec464ede81e5c79f76af8ad9e53ba393a0df5d9ce00dccd782232006126286cedf016ee4a33af799a0fb585253b35727959f7077cc917a586c745d8ac792dbb3e6f72eb98dbaaeb87aebadf8953035e8a4f0590d3803bf803845272adb34feb3c4bba4709f903e57e940b432a2f7719ecd4cf5cb1836bf1f3234e39509ea5f3ede3f00"/1514], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 08:08:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:03 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1321.003641][T28830] serio: Serial port pts2 08:08:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:06 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:06 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(0x0, 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:06 executing program 0: clock_gettime(0x0, &(0x7f0000000080)={0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={r0}, 0x0) 08:08:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:06 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(0x0, 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1323.840627][T28843] serio: Serial port pts0 [ 1323.851576][T28849] serio: Serial port pts1 08:08:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:06 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:06 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(0x0, 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:06 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1324.016179][T28857] serio: Serial port pts0 08:08:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:09 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(0x0, 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:09 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:09 executing program 0: syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 08:08:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 08:08:09 executing program 0: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140)='./file0\x00') 08:08:09 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1326.944553][T28886] serio: Serial port pts1 08:08:09 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(0x0, 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1326.959443][T28880] serio: Serial port pts0 08:08:09 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/vlan/config\x00') 08:08:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:12 executing program 0: bpf$PROG_LOAD(0xf, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:08:12 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:12 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(0x0, 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x18, 0x4, &(0x7f0000001a80)=@framed={{}, [@ldst={0x3}]}, &(0x7f0000001b00)='GPL\x00', 0x5, 0xde, &(0x7f0000001b40)=""/222, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c40), 0x8, 0x10, 0x0}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) 08:08:12 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:12 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:12 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:12 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_gettime(0x0, &(0x7f0000000100)) [ 1330.082299][T28915] serio: Serial port pts0 08:08:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:15 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:15 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:15 executing program 0: mq_unlink(&(0x7f0000000540)='/dev/cuse\x00') 08:08:15 executing program 0: write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000000)={0x9}, 0x9) pipe2$9p(&(0x7f00000003c0), 0x0) 08:08:15 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1333.036957][T28941] overlayfs: failed to resolve './file1': -2 08:08:16 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) 08:08:16 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:16 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1333.114039][T28950] overlayfs: failed to resolve './file1': -2 [ 1333.154014][T28951] serio: Serial port pts1 08:08:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:16 executing program 0: process_madvise(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) 08:08:16 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1333.251397][T28956] overlayfs: failed to resolve './file1': -2 08:08:16 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:16 executing program 0: shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0xc000) 08:08:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:16 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:16 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x4000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) 08:08:16 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:16 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:16 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2006) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r1 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) 08:08:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:16 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:16 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:16 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') 08:08:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 08:08:16 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2006) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r1 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) 08:08:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:16 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x7041, 0x0) 08:08:16 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:16 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1333.963454][T29019] overlayfs: failed to resolve './file1': -2 08:08:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2006) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r1 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) [ 1334.124399][T29034] overlayfs: failed to resolve './file1': -2 08:08:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:17 executing program 0: msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/104) 08:08:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:17 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:17 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:17 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x748880, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) 08:08:17 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:17 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1334.630651][T29040] overlayfs: failed to resolve './file1': -2 [ 1334.649983][T29047] overlayfs: missing 'lowerdir' 08:08:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:17 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000026c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}}) [ 1334.763006][T29057] overlayfs: missing 'lowerdir' [ 1334.851740][T29062] fuse: Bad value for 'fd' 08:08:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:18 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:18 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:18 executing program 0: process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, &(0x7f0000000540)=[{&(0x7f0000000280)=""/227, 0xe3}, {0x0}], 0x2, 0x0) 08:08:18 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x2) read(r0, 0x0, 0x2006) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r1 = gettid() syz_open_pts(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) 08:08:18 executing program 0: bpf$PROG_LOAD(0x11, 0x0, 0x0) 08:08:18 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x2) read(r0, 0x0, 0x2006) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r1 = gettid() syz_open_pts(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) 08:08:18 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:18 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x2) read(r0, 0x0, 0x2006) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r1 = gettid() syz_open_pts(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) 08:08:18 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020) [ 1335.535708][T29073] overlayfs: missing 'lowerdir' 08:08:18 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[]) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1335.644794][T29087] overlayfs: missing 'lowerdir' 08:08:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r1 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) 08:08:19 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[]) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0xff, 0x427, 0x0, 0x1}, 0x48) 08:08:19 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 08:08:19 executing program 0: bpf$PROG_LOAD(0x14, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:08:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) [ 1336.418065][T29093] overlayfs: missing 'lowerdir' 08:08:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r1 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) 08:08:19 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[]) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0x0, &(0x7f0000000080)={0x0, 0x0}) 08:08:19 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r1 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) 08:08:19 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1336.582661][T29115] overlayfs: missing 'lowerdir' 08:08:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:19 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 08:08:19 executing program 0: shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_LOCK(0x0, 0xb) 08:08:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 08:08:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) [ 1336.755598][T29129] overlayfs: missing 'lowerdir' 08:08:19 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:19 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:19 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x40049409, 0x0) 08:08:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) [ 1336.929818][T29147] overlayfs: missing 'lowerdir' 08:08:19 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:19 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1336.955561][T29145] overlayfs: missing 'lowerdir' 08:08:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 08:08:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:19 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0xc0189436, 0x0) 08:08:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:19 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:19 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1337.086260][T29156] overlayfs: missing 'lowerdir' [ 1337.091882][T29158] overlayfs: missing 'lowerdir' 08:08:20 executing program 0: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@OVL_FILEID_V0={0x15, 0xfb, {0x0, 0xfb, 0x15, 0x0, 0x0, "67f17b4885a48e33695f350be9e36a34"}}, 0x0) 08:08:20 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[]) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) [ 1337.170298][T29168] overlayfs: missing 'lowerdir' 08:08:20 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x2) read(r0, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r1 = gettid() syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF2(r0, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) 08:08:20 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 08:08:20 executing program 0: syz_open_dev$vcsu(&(0x7f00000002c0), 0x0, 0x40801) [ 1337.242016][T29170] overlayfs: unrecognized mount option "workdi" or missing value 08:08:20 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:20 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x2) read(r0, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r1 = gettid() syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF2(r0, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) [ 1337.308781][T29177] overlayfs: missing 'lowerdir' 08:08:20 executing program 0: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080), 0xfffffffffffffe68) 08:08:20 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[]) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:20 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 08:08:20 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x2) read(r0, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r1 = gettid() syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF2(r0, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x13) 08:08:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4020940d, 0x0) [ 1337.424639][T29188] overlayfs: unrecognized mount option "workdi" or missing value 08:08:20 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:20 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 08:08:20 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[]) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1337.477445][T29192] overlayfs: missing 'lowerdir' 08:08:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/4096, 0x1000) 08:08:20 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1337.573941][T29202] overlayfs: unrecognized mount option "workdi" or missing value 08:08:20 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 08:08:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) [ 1337.644740][T29208] overlayfs: missing 'lowerdir' 08:08:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:20 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/4096, 0x1000) 08:08:20 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 08:08:20 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1337.746327][T29213] overlayfs: missing 'lowerdir' 08:08:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/4096, 0x1000) 08:08:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:20 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1337.860901][T29225] overlayfs: missing 'lowerdir' 08:08:20 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1337.889997][T29228] overlayfs: missing 'lowerdir' 08:08:20 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/4096, 0x1000) 08:08:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:20 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:20 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1338.063847][T29239] overlayfs: missing 'lowerdir' [ 1338.068618][T29244] overlayfs: missing 'lowerdir' 08:08:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:21 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) 08:08:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1338.204579][T29254] overlayfs: unrecognized mount option "lower" or missing value 08:08:21 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) [ 1338.240316][T29259] overlayfs: missing 'lowerdir' 08:08:21 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:21 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x5, 0x0, 0xffffffff, 0x1, 0x0, "f8f32f1c836a64f7dd2d645d23a5779d222d52"}) 08:08:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:21 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 08:08:21 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:21 executing program 0: syz_io_uring_setup(0x4d41, &(0x7f00000006c0)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000740), &(0x7f0000000780)) 08:08:21 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1338.373382][T29266] overlayfs: unrecognized mount option "lower" or missing value [ 1338.374465][T29269] overlayfs: unrecognized mount option "workdi" or missing value 08:08:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:21 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xe601, 0x0) 08:08:21 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:21 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:21 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1338.494448][T29281] overlayfs: unrecognized mount option "workdi" or missing value [ 1338.505049][T29280] overlayfs: unrecognized mount option "lower" or missing value 08:08:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:21 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xe601, 0x0) 08:08:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:21 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 08:08:21 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:21 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1338.674815][T29292] overlayfs: unrecognized mount option "lowerdir" or missing value [ 1338.689363][T29299] overlayfs: unrecognized mount option "workdi" or missing value 08:08:21 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xe601, 0x0) 08:08:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) [ 1338.838309][T29308] overlayfs: missing 'lowerdir' 08:08:21 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1338.894341][T29311] overlayfs: unrecognized mount option "lowerdir" or missing value 08:08:21 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xe601, 0x0) 08:08:21 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:21 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1339.000440][T29325] overlayfs: missing 'lowerdir' 08:08:21 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') write$khugepaged_scan(r0, &(0x7f0000000180), 0x8) 08:08:21 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1339.081079][T29329] overlayfs: unrecognized mount option "lowerdir" or missing value 08:08:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:22 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 08:08:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:22 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1339.159284][T29339] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 1339.182448][T29337] overlayfs: missing 'lowerdir' 08:08:22 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:22 executing program 0: r0 = inotify_init1(0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000001c0), 0x0) 08:08:22 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) [ 1339.333015][T29355] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 1339.333404][T29351] overlayfs: unrecognized mount option "lower" or missing value 08:08:22 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x5}, 0x48) 08:08:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:22 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x20000, 0x1) syncfs(r3) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:22 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1339.456385][T29362] overlayfs: unrecognized mount option "lowerdir=" or missing value 08:08:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) [ 1339.507679][T29368] overlayfs: unrecognized mount option "lower" or missing value 08:08:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:22 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:22 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:22 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5427, 0x0) 08:08:23 executing program 0: syz_clone(0x8400d080, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000002c0)) 08:08:23 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) [ 1340.138059][T29386] overlayfs: unrecognized mount option "lower" or missing value 08:08:23 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:23 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1340.277561][T29406] overlayfs: unrecognized mount option "lowerdir" or missing value [ 1340.379814][T29412] overlayfs: unrecognized mount option "lowerdir" or missing value 08:08:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:23 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:23 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:23 executing program 0: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0) [ 1341.050672][T29419] serio: Serial port pts0 08:08:23 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:23 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1341.081139][T29420] overlayfs: unrecognized mount option "lowerdir" or missing value 08:08:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:24 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) 08:08:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:24 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a002b, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1341.250839][T29436] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 1341.266856][T29434] serio: Serial port pts1 08:08:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:24 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) [ 1341.351677][T29439] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 1341.437664][T29448] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 1341.502747][T29450] serio: Serial port pts1 08:08:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:24 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(0x0, 0xffffffffffffffff, 0x0) 08:08:24 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:24 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) write$FUSE_ATTR(r0, &(0x7f0000002ac0)={0x78, 0x6}, 0x78) [ 1342.016063][T29460] serio: Serial port pts0 08:08:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:24 executing program 0: r0 = memfd_create(&(0x7f0000000240)='fsmagic', 0x4) fstatfs(r0, &(0x7f0000000280)=""/54) 08:08:24 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) 08:08:24 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(0x0, 0xffffffffffffffff, 0x0) 08:08:25 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x0) lstat(&(0x7f0000000000)='./bus/file0/file0\x00', 0x0) [ 1342.164805][T29472] serio: Serial port pts0 08:08:25 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0xc000) 08:08:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:25 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(0x0, 0xffffffffffffffff, 0x0) 08:08:25 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x16, 0x0, 0x0) 08:08:25 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(0x0, 0x0) 08:08:25 executing program 0: openat$nvram(0xffffffffffffff9c, 0x0, 0x400000, 0x0) [ 1342.884869][T29495] serio: Serial port pts0 08:08:25 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x490780, 0x0) 08:08:25 executing program 5: pipe2$9p(&(0x7f00000012c0), 0x0) 08:08:25 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(0x0, 0x0) 08:08:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:25 executing program 0: syz_io_uring_setup(0x1003, &(0x7f0000000540), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) [ 1343.062362][T29509] serio: Serial port pts0 08:08:26 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x2a002b, 0x0) lstat(0x0, 0x0) 08:08:26 executing program 5: sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 08:08:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:26 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x24600, 0x0) 08:08:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4}}]}}]}, 0x44}}, 0x0) 08:08:26 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') [ 1343.794428][T29528] serio: Serial port pts0 08:08:26 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x2000304) 08:08:26 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x20000300) 08:08:26 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0xc0045878, 0x0) 08:08:26 executing program 5: waitid(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) 08:08:26 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x0, 0x2, &(0x7f00000013c0)=@raw=[@map_val], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:08:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:26 executing program 0: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, &(0x7f0000000540)=[{&(0x7f0000000280)=""/227, 0xe3}], 0x1, 0x0) 08:08:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:27 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) 08:08:27 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="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", 0xfd1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080), 0xc, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@map}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x18, 0x4, &(0x7f0000001a80)=@framed={{}, [@ldst={0x3}]}, &(0x7f0000001b00)='GPL\x00', 0x5, 0xde, &(0x7f0000001b40)=""/222, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c40), 0x8, 0x10, 0x0}, 0x80) 08:08:27 executing program 5: syz_mount_image$romfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x10400c0, &(0x7f0000001940)) 08:08:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000080)={0x0, 0x0}) 08:08:27 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1344.701572][T29558] serio: Serial port pts0 08:08:27 executing program 1: syz_io_uring_setup(0x0, &(0x7f00000006c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000740), &(0x7f0000000780)) 08:08:27 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, 0x0, 0x0) [ 1344.720949][T29451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:08:27 executing program 0: syz_io_uring_setup(0x4d41, &(0x7f00000006c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000740), &(0x7f0000000780)) 08:08:27 executing program 5: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000003e40)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) [ 1344.721397][T29451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.356290][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:08:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:28 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r1, &(0x7f0000002ac0)={0x2020, 0x0, 0x0}, 0x48b) write$FUSE_LK(r0, &(0x7f0000002040)={0x28, 0x0, r2}, 0x28) 08:08:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:28 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x80045432, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:08:28 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, &(0x7f00000000c0)) 08:08:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/232, 0xe8}], 0x1}}], 0x1, 0x140, 0x0) 08:08:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r1, 0x803, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team0\x00'}]}, 0x28}}, 0x0) [ 1345.641526][T29590] serio: Serial port pts0 08:08:28 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) 08:08:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002100)=ANY=[], 0x38}}, 0x0) 08:08:28 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) 08:08:28 executing program 0: r0 = eventfd(0x0) write$eventfd(r0, &(0x7f00000001c0), 0x8) [ 1345.997774][T29451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.998213][T29451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:08:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 08:08:31 executing program 5: io_uring_setup(0x1605, &(0x7f0000000040)) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) io_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x1003, &(0x7f0000000540)={0x0, 0x0, 0x10, 0x0, 0xd2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 08:08:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') accept4$inet6(r0, 0x0, 0x0, 0xc0000) 08:08:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1348.566323][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:08:31 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5409, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0xa2, 0x1, 0x4ff9, 0x0, 0x1a, "17171e66f01bd58b"}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3ff, 0x0, "e20e8051a0fa3607"}) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0) 08:08:31 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000026c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) 08:08:31 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x7040, 0x0) 08:08:31 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x7040, 0x0) 08:08:31 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002ac0)={0x2020}, 0x2020) [ 1348.733913][T29638] serio: Serial port pts1 08:08:31 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x7040, 0x0) [ 1350.476347][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.476530][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.126469][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:08:34 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x531001, 0x0) 08:08:34 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x7040, 0x0) 08:08:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:34 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5409, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0xa2, 0x1, 0x4ff9, 0x0, 0x1a, "17171e66f01bd58b"}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3ff, 0x0, "e20e8051a0fa3607"}) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0) 08:08:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:34 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='pagemap\x00') 08:08:34 executing program 5: syz_open_dev$sg(&(0x7f0000001180), 0x4, 0x0) 08:08:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) [ 1351.756313][T29451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.756739][T29451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:08:34 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2080) write$FUSE_ATTR(r0, &(0x7f0000002ac0)={0x78, 0x0, r1}, 0x78) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002080)={0xa0, 0x0, r1}, 0xa0) 08:08:34 executing program 5: write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000000)={0x9}, 0x9) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000400)={0xb}, 0xb) 08:08:34 executing program 0: syz_io_uring_setup(0x1003, &(0x7f0000000540), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000005c0), 0x0) syz_io_uring_setup(0x4d41, &(0x7f00000006c0)={0x0, 0x0, 0x2, 0x0, 0x39e}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000740), &(0x7f0000000780)) [ 1351.871457][T29670] serio: Serial port pts0 08:08:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1c", @ANYRES32=0x0, @ANYBLOB="00000000e0000002000000001400000000000000000000000200000003000000000000001400000000000000004000000700000000000000000000001c000000000000f3"], 0xf0}}], 0x2, 0x0) 08:08:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:34 executing program 0: bpf$PROG_LOAD(0xe, 0x0, 0x0) [ 1351.986941][T29687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.676601][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:08:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, 0x0) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:37 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 08:08:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:37 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5409, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0xa2, 0x1, 0x4ff9, 0x0, 0x1a, "17171e66f01bd58b"}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3ff, 0x0, "e20e8051a0fa3607"}) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0) 08:08:37 executing program 5: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfeffff7f}, 0x8) 08:08:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000003a40)=[{{&(0x7f0000000380)={0x2, 0x4e24}, 0x10, &(0x7f0000000940)=[{&(0x7f00000003c0)='E', 0x1}, {&(0x7f0000000400)="952c755f77c3d24e75297d26143af188d332288d0c19a24a5fa85720d471bfd2e219bce2e5d18bdb0a4ab33f408c32e9a68d9574e6", 0x35}, {&(0x7f0000000480)="6fe5ba671189a4025909b08d310b58013c326089bf84d98f0d808d09a7efb582ed0dda728cf12f39aef42c101c86c88a6b66c38f6b0bcadfc8a51efaaea28a09bb19687610c736d33f3606a23a1bf0259e6b3e20a7d5c07271757e05a176bcb5ddaee65a648c84bade4ba36cc84f87b7fc5746d1f9679bedcc99d7d34b", 0x7d}, {&(0x7f0000000600)="1fea5a0af993e3efab8fb59aaa3434df95e5b2526a239ac277c705b399ec9788f1b917854aa2b40463b13b0b6440bc493ae3fda23d02272efb77bf27c74abe4cf8e6e859782f269b52b318f6bc82d8a2692843d6c57f71c648ed6a241e55d647f962577c69ee85cbd09f4623a4b586d0eeaa969e4fc12c7e9531feeed592c85b860a602c2009c1", 0x87}, {&(0x7f00000006c0)="f0b522fd0a39d7d42a220437b1b56135f67bbaf79364d4648cd94ba4c1080a02dfaa2d9c1819a0d199acfc7c08682f4df698d1ed7b3a2ef2f006d91a1efa7718bf6b4005766face06d312fbc5909673635dd288d2eb1b9696b4a3c9ecd6a2eca53919d3a815b2496bbf887cb035653be8c3c64db8a7d708498f21f010ee4953e14c01c4641c9bd653a30bea1683b718f0b05d8519220695a3979ae4c26ec3b7c3ade", 0xa2}, {&(0x7f0000000500)="b228d88f6b7fd7b952c51f0bb7b7d4b2dae8561b79dbcceda9df4dfd8fa2edbb4c12db9b0bdf336ad1774f3998387c5d972cb39ccc45dc4246dd", 0x3a}, {&(0x7f0000000780)="9809fb10bde5e194abcf02c9b22196c8f92be36d3825a00abf9870c086e4391455cad599abb941a8cbb0db7a7f7a9c05f5b969f363758245fb68cc7ab086b205f4af79ab5e51d47194b3b64aad0c5ce85bbbcd2371a20ecb0c853c8d41be5b7725da946af0b0dffde04ba71029b1c7b4975122fc37374cd3f4bf2864d447ffdafb223bd03bc32484b3b2af94a1010a899840749c4c4a342636a772d917c52f02ba697c0039266247d979659a694f", 0xae}, {&(0x7f0000000ac0)="880e905074619177909ad0d75f5ba5ddac9dcb371d7923d4c0ffffff2b28c932520afce7086d741ed142dcec8896d2bc6a6e9e727047d5906016905ee3b1aecaad52fc085c167e0981706cf8a64bb1575f43a85678ab83b49f55726c793e5ac78fc57e85ab3f052bcbb47388b57aa60a12192b001f3fd637bbc5e9f9a0db17964c5bf6c23e8d5bf4", 0x88}, {&(0x7f00000008c0)="09d78295813a786983321e493843801e03623b015e4552b4d85b786f8a207ca7ec3f6aff9da7fe10ce03e48ffcbcbefb8da62789d53c8d93e0f6baba1f4c66cbbacdd0cf62fa1ba5d6541a86ad327b", 0x4f}], 0x9, &(0x7f0000000a00)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x2e, 0x0, 0x3, [0x10001, 0x6, 0x7fff, 0xffffffff, 0x200000, 0x3f]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x50}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0], 0xf0}}], 0x2, 0x4080) 08:08:37 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 08:08:37 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x12, 0x0, 0x0) 08:08:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, 0x0, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:37 executing program 5: bpf$PROG_LOAD(0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:08:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1354.948280][T29714] serio: Serial port pts0 [ 1354.950071][T29717] serio: Serial port pts1 [ 1355.606280][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.236435][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.254590][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.796286][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.526340][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:08:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, 0x0) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:40 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000007c0), 0x414a01, 0x0) 08:08:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, 0x0, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:40 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "e20e8051a0fa3607"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x0, "e20e8051a0fa3607"}) 08:08:40 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5409, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0xa2, 0x1, 0x4ff9, 0x0, 0x1a, "17171e66f01bd58b"}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3ff, 0x0, "e20e8051a0fa3607"}) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0) 08:08:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:40 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000004c0)) 08:08:40 executing program 5: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000002c0)) [ 1357.905281][T29738] serio: Serial port pts0 08:08:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, 0x0, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:40 executing program 5: bpf$PROG_LOAD(0x9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:08:40 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0xffffffffffffff58, 0x0, &(0x7f0000001600), 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002040), 0x0, 0x1000) 08:08:40 executing program 5: socket(0x28, 0x0, 0x80000001) [ 1358.055136][T29755] serio: Serial port pts0 [ 1358.796492][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.718632][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:08:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, 0x0) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:43 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000002080)=ANY=[@ANYBLOB="f0030000", @ANYRES64], 0x3f0) 08:08:43 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5412, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:08:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:43 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x903801, 0x0) 08:08:43 executing program 5: pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000400)={0xb}, 0xb) 08:08:43 executing program 0: bpf$PROG_LOAD(0x1a, 0x0, 0x0) 08:08:43 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) [ 1360.984724][T29773] serio: Serial port pts0 08:08:43 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='attr/fscreate\x00') 08:08:43 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002b40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r1, &(0x7f0000000080)={0x18, 0x0, r2}, 0x18) [ 1361.063715][T29776] serio: Serial port pts1 08:08:43 executing program 5: bpf$PROG_LOAD(0xd, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1361.357198][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.357233][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.006347][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.646293][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.276480][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.276897][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.916932][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:08:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x1fe, 0x0, &(0x7f0000000000/0x3000)=nil}) 08:08:46 executing program 1: syz_mount_image$romfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x1, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000880)="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", 0x1000, 0x5}, {&(0x7f0000000300)="587de9b2b4c065287f2febfb31ff9052c0f8b641fa0e0d50468b1416b470e1a7c6b9de3d4e16a85a3e4349517f28e60e0b6f98474f318bc24fc92377a3c678e4520ee58672f7964d17994782bcf3af01d6e9f3ccb49845ac5c0c729c7c9141ea713772dcb5de70f77b60aa3718335315afd9824542329718ad34f53d0d320c7dc363246246b8069b64c5d60341825525cbdedb74e96768dd7b6bc1f3f581600473d61e728ab73ce22c18b7f2802882c7bd007bd53220fea447", 0xb9, 0x15}, {&(0x7f00000003c0)="f09e7b06bbbdb80a731240a4cb262dce5928c618e38213005178aa22a042607b4c7b82a9637ff2b1a3b04b0b73c3f470e56868600818425eb79919b4ff307f72511e8b2db64d078353549b6b7de1ee17d1494bdc1e775621d1e4a9a1d966a0845eeb8769782ba7df7fe62c827a92e726df289e7a4b9097374905bbe5f10a8f1565042ade201c30e598b75f10d0fa00b0e068ec359381b261f72fd8bdb17cc27c9e2b95349675a204816b91f29a60a3c3c3ccb0b8223d163c8c0681f702c9dec142c6a7701bbb17a697905ec13b2b18131c2411f181a0d165807f0af9663006a80dc8fb6ec14b54e686361e65df0c95bf2d88ec0508", 0xf5, 0x1}, {&(0x7f00000004c0)="c8b167573b0183e5a20bc89f884a66af3eaf1a99fe10d6edb0f5a7d0fe9b4f254a712a6b806be20be694fd0c7c31b6caa68b29df9005b5d4e6151c724e2dc036eb012ee098a59704208fbeb72eb637dbc9160d70e27b1ea95ea3549d8a319984f13147050e50d04f8205f08c196567a83d856adaab943829384c027b4ddc9c64540689cdc450aec4959a67ab7fa60362850fc1cedb9843cfcfdafb6b97b0a1103dc089537d9a931d", 0xa8, 0xf6}, {&(0x7f0000000580)="d84e033cbb32e025a442e6bc2e19982002d441265da1011ac6617c7b5985dd85aade10d54e598916d8fbdd0be0ca0e34253a1f7d27f8a3960888cfb86aac023cfea86806ef9cd97c94b36ea7605823b3afa6c97ecd320a3ecb75ff48e54f570f", 0x60, 0x3}, {&(0x7f0000000600)="47c6173a2376d37d8774e14b2ddefd23721ca5b6910b95d59e90a79f96f6495ce0cb724f7279783e25ac4b07909cb5ae77408c23f7488a061f415e6ec8ebe0137bca251e330684c54297bed754036080f624651b5c5f119c723d50175e155f3716e8320419f1dd9210894880e5e5262716e28db73fb41ffe27a7d818fbf9b22cb80fcdadddc56218bfb761b58f3420fa2470851de27ebeec4b0c8e1eafa125c7e56f3c24f1ddd2c6f694393fef889ba6ba499dcfe9c53c14461a9b94bb", 0xbd, 0x81}], 0x8000, &(0x7f0000001880)={[{'/dev/ttyS3\x00'}]}) 08:08:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:46 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa81, 0x0) 08:08:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:46 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000640)="0fd3f40f20d86635080000000f22d8ff4300d7440f20c066350e000000440f22c0baf80c66b828fb1d8266efbafc0ced6565260f64be0060baf80c66b8482f7d8566efbafc0c66edf30fa7c8baf80c66b8561e5d8d66efbafc0ced", 0x5b}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1364.058734][T29799] loop1: detected capacity change from 0 to 8 [ 1364.082148][T29802] serio: Serial port pts0 [ 1364.084884][T29806] serio: Serial port pts1 [ 1364.085062][T29799] romfs: Unknown parameter '/dev/ttyS3' 08:08:47 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 08:08:47 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x4, 0x0, 0x0) 08:08:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:47 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) inotify_rm_watch(r0, 0x0) [ 1364.250590][T29820] serio: Serial port pts1 08:08:47 executing program 1: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) 08:08:47 executing program 0: bpf$PROG_LOAD(0x1e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:08:47 executing program 0: sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x15}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x40}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="f238bf731731"}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000045}, 0x4040840) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000400)={0x7, 0x15, 0x1}, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000004c0)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0x7f, 0x0, 0x101, 0x1, @local, @private0, 0x10, 0x8000, 0x101}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RRENAME(r0, &(0x7f0000002940)={0x7, 0x15, 0x1}, 0x7) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000002ac0)={0x78, 0x0, 0x0, {0x2, 0x0, 0x0, {0x1, 0xffff, 0x8, 0x0, 0x200, 0x0, 0x6, 0x1ff, 0x3, 0x1000, 0x7, 0x0, 0x0, 0x3ff, 0xfffffffa}}}, 0x78) write$P9_RRENAME(r1, &(0x7f0000002b40)={0x7}, 0x7) 08:08:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:47 executing program 1: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) [ 1364.457863][T29838] serio: Serial port pts1 [ 1366.477706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.479522][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:08:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000002440)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x804, 0x1}, 0x48) 08:08:49 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000640)="0fd3f40f20d86635080000000f22d8ff4300d7440f20c066350e000000440f22c0baf80c66b828fb1d8266efbafc0ced6565260f64be0060baf80c66b8482f7d8566efbafc0c66edf30fa7c8baf80c66b8561e5d8d66efbafc0ced", 0x5b}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:49 executing program 1: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) 08:08:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) 08:08:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:49 executing program 1: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) 08:08:49 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') [ 1367.043276][T29688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.085353][T29853] serio: Serial port pts0 [ 1367.128702][T29859] serio: Serial port pts1 08:08:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x4, 0xff, 0x380, 0x1}, 0x48) 08:08:50 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) 08:08:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:50 executing program 0: bpf$PROG_LOAD(0x21, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:08:50 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40081) 08:08:50 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000640)="0fd3f40f20d86635080000000f22d8ff4300d7440f20c066350e000000440f22c0baf80c66b828fb1d8266efbafc0ced6565260f64be0060baf80c66b8482f7d8566efbafc0c66edf30fa7c8baf80c66b8561e5d8d66efbafc0ced", 0x5b}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1367.402537][ T28] audit: type=1400 audit(1654675730.247:579): avc: denied { write } for pid=29881 comm="syz-executor.1" name="sg0" dev="devtmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1368.316448][T29688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.406315][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.036291][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.676521][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:08:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, 0x0) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:52 executing program 0: bpf$PROG_LOAD(0x13, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:08:52 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x6) 08:08:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:52 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000640)="0fd3f40f20d86635080000000f22d8ff4300d7440f20c066350e000000440f22c0baf80c66b828fb1d8266efbafc0ced6565260f64be0060baf80c66b8482f7d8566efbafc0c66edf30fa7c8baf80c66b8561e5d8d66efbafc0ced", 0x5b}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) 08:08:53 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000017c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)={0xb8, 0x0, r1, [{{0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {0x0, 0x0, 0xa, 0x0, '/dev/cuse\x00'}}]}, 0xb8) 08:08:53 executing program 1: syz_io_uring_setup(0x4d41, &(0x7f00000006c0)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000740), &(0x7f0000000780)) openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x24600, 0x0) [ 1370.206423][T29898] serio: Serial port pts0 08:08:53 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002740)={{0x0, 0x0, 0xee00, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff}) 08:08:53 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x22}, 0x14) 08:08:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000240)={0xd04, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xcf0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0xce8, 0x4, 0x0, 0x1, [{0xce4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xe1, 0x2, "8c544c968adcea1a87a9eea015eb34443a89386110290a2c3cbdb8f78d601644b9e4ee4a55d8565bc3498b6c69c41411086834a0f616afb542ad99e68ccf56eab63d2458e27771c583a9471bedce9cf746728f72f1b30dd4edf470c299313998f625c7a676aa0e32850eb110a00214eecde6d23f1d036a7a928fb4feb85bd1f71b23c69867b282c85bb142dfe02c8d6e63fd5ec55603898757ed9b47fabbe19f82d584e1a847cacdd52ace41fd14883ee1e84ff048d09ebbcdc54fa6a51198f2292935e27a236a457f544d7cfd3ad49bab9958932a26907a5c4d33955a"}, @NL80211_PKTPAT_MASK={0xbf9, 0x1, "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"}]}]}]}]}, 0xd04}}, 0x0) [ 1370.272685][T29910] serio: Serial port pts1 08:08:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1371.606711][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.246465][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:08:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, 0x0) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:56 executing program 5: eventfd(0x0) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x1003, &(0x7f0000000540)={0x0, 0x20e0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000005c0), 0x0) syz_io_uring_setup(0x4d41, &(0x7f00000006c0)={0x0, 0x0, 0x2, 0x0, 0x39e}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000740), &(0x7f0000000780)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) 08:08:56 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) 08:08:56 executing program 1: syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) 08:08:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) 08:08:56 executing program 1: syz_mount_image$romfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40024, &(0x7f00000004c0)) 08:08:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={0x0, 0x38}}, 0x0) 08:08:56 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7}, 0x7) [ 1373.251950][ T28] audit: type=1326 audit(1654675736.097:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29934 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d32e89109 code=0x0 [ 1373.254650][T29941] serio: Serial port pts0 08:08:56 executing program 0: mknodat$null(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x103) [ 1373.329900][T29946] serio: Serial port pts1 08:08:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:56 executing program 1: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000002080)=""/35) [ 1373.516754][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.156419][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.447150][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:08:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, 0x0) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:08:59 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5409, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:08:59 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/181) 08:08:59 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5423, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:08:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x13) 08:08:59 executing program 0: msgsnd(0x0, &(0x7f0000003e40)={0x2}, 0x8, 0x0) 08:08:59 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5450, 0x0) 08:08:59 executing program 0: bpf$PROG_LOAD(0x1e, 0x0, 0x0) 08:08:59 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x40280, 0x0) [ 1376.375027][T29979] serio: Serial port pts1 08:08:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x13) 08:08:59 executing program 0: syz_clone(0x8400d080, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 1376.490726][T29991] serio: Serial port pts0 [ 1376.718084][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.007235][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:09:02 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5437, 0x0) 08:09:02 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4672582b9589e10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:09:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:09:02 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) [ 1379.276630][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 08:09:02 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x80045440, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:09:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:09:02 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 08:09:02 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541d, 0x0) 08:09:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x13) [ 1379.461822][T30012] serio: Serial port pts1 08:09:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:09:02 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x4003, 0x0) 08:09:02 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 1379.527035][T30019] serio: Serial port pts0 08:09:02 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x8, 0x7fffffffffffffff) 08:09:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 08:09:02 executing program 5: syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="a4") [ 1379.645863][T30027] serio: Serial port pts1 08:09:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x48) 08:09:02 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x0, "e20e8051a0fa3607"}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) ioctl$TIOCGSERIAL(r0, 0x540c, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000180)={0xc9, 0x80}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x7, 0x9, 0xf9, 0x1, 0x1, "e9e67d754dc24274f218beebbdcfc112bf448e"}) mlockall(0x3) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) 08:09:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:09:02 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5415, 0x0) 08:09:02 executing program 1: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) [ 1379.846319][T30049] serio: Serial port pts1 [ 1379.927848][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.196502][T29451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x0) 08:09:05 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, 0x0) setrlimit(0x0, 0x0) 08:09:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 08:09:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:09:05 executing program 1: socketpair(0x10, 0x0, 0x0, &(0x7f0000000800)) 08:09:05 executing program 0: r0 = gettid() ptrace$peek(0xffffffffffffffff, r0, 0x0) [ 1382.476393][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:05 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2080) write$FUSE_ATTR(r0, &(0x7f0000002ac0)={0x78, 0x0, r1}, 0x78) 08:09:05 executing program 0: syz_mount_image$tmpfs(&(0x7f0000001800), &(0x7f0000001840)='./file0\x00', 0x0, 0x0, 0x0, 0x200002, &(0x7f0000002a80)=ANY=[@ANYBLOB='huge=']) [ 1382.552799][T30059] serio: Serial port pts0 [ 1382.560822][ T28] audit: type=1326 audit(1654675745.407:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30056 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febec289109 code=0x0 08:09:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) [ 1382.623642][T30069] serio: Serial port pts1 08:09:05 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 08:09:05 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)) [ 1382.670236][T30076] tmpfs: Bad value for 'huge' 08:09:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1382.697810][T30079] serio: Serial port pts0 [ 1383.116282][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.767513][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.320428][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.956185][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x0) 08:09:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x13) 08:09:08 executing program 1: bpf$PROG_LOAD(0x17, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:09:08 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 08:09:08 executing program 2: syz_mount_image$fuse(0x0, &(0x7f00000026c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xee00, 0x0) 08:09:08 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 08:09:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 08:09:08 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mlockall(0x3) 08:09:08 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5416, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:09:08 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 1385.640286][T30096] serio: Serial port pts0 08:09:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) 08:09:08 executing program 5: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x200000) [ 1385.697659][T30103] serio: Serial port pts1 [ 1385.826015][T30116] serio: Serial port pts0 [ 1386.956986][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.246188][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:11 executing program 2: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/68) 08:09:11 executing program 1: syz_mount_image$fuse(&(0x7f0000002680), &(0x7f00000026c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004780)) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xee00, 0x0) 08:09:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:09:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x0) 08:09:11 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0xe, &(0x7f00000000c0)) 08:09:11 executing program 5: syz_mount_image$romfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f00000006c0)=[{&(0x7f0000000880)="2793048c55589e233d2aabbc0336a0aedd0b3d1d3feadbd97efc9c85737cbebfb99e058fcedb94b142e3b8fbe8b371cd6f16c9ac99deee8c1cad37a29fbe7e0f337ca454bbc40e557a67c933a3bef12ed2fb770b967f4dd9056d3752b86d9cc75193ee0dbe5f0c04b118569e4a0be0f3120563fabbab0aa32ebf32aad0b459aba1f89bc95417930aad6d4a6ad7db59fbb70b34692257ca2a92d67d3bf612c8c3c9d02044262767240c5b190b70c2e41435402f729de9e34941f6c53ae974c07e8f67c0afa76c7caac039a5f6f5e8b779e7e9309d90c8e197fb61d199a01a0c28218a2675d3efcb77c93ac4a1c8d8ca4bd96ae7443ffc1095564c8dc1ca7018982ddf3b22818dc8153664c67b6e2848437253e01b3f9b280aa510b8695cd21109b7f5296b4c230f135ea6ac986bf4d5a113515aa4e68a8c3b3964de8138b2ae5be145aaa4f07d00ef94869553e03b4282944d621e34653823934632de579680fa2c109fbcc000c66efda0653aa5c4c1212e9a1131673cdac87e6c0e1ef3141344aebddc45947b9db0360cc481ba10f2deee4266ad0ca2eb5f5b667f9412e1c09ee1955f4a2b12a0c9d91ddc3d6e8cad00bef1a2ee1ea64558973bf00fa5a8ea51d4c7abbbd4537544d6abb41af22a0b8a388d2ed71949821af8431412a2fcee40db9189ededc8a22ae40afeb90b6b7b81ae0e3d6bd3b346072b03b4", 0x1fb, 0x5}], 0x0, &(0x7f0000001880)) 08:09:11 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x4) 08:09:11 executing program 2: write$khugepaged_scan(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="964045eed68f52d45e895c5cd9ac28ad2e50b62f58b3f5edca7a77118e5799db5a6ca7003ca788249545a80158bc25e20368cb1f5ed1a545f008604be7916465b110c8db") getpgid(0x0) [ 1388.680847][T30125] fuse: Bad value for 'fd' 08:09:11 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x2, 0x0, 0x700) 08:09:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) [ 1388.789087][T30129] serio: Serial port pts1 [ 1388.794312][T30133] loop5: detected capacity change from 0 to 1 [ 1388.795469][T30133] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1388.807206][T30133] Dev loop5: unable to read RDB block 1 08:09:11 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x22}, 0x10) [ 1388.807244][T30133] loop5: unable to read partition table [ 1388.807404][T30133] loop5: partition table beyond EOD, truncated 08:09:11 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 08:09:11 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "4c7c923488e2b7de1b67f6ff357f39e15acb56"}) 08:09:11 executing program 1: r0 = socket$inet(0x2, 0x80a, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 08:09:11 executing program 2: syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') [ 1388.865217][T30140] serio: Serial port pts0 [ 1388.872367][T27518] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1388.872412][T27518] Buffer I/O error on dev loop5, logical block 0, async page read [ 1388.886254][T29688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.357506][T29688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.516403][T29451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:14 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) 08:09:14 executing program 5: bpf$PROG_LOAD(0xe, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:09:14 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x0) 08:09:14 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5452, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:09:14 executing program 3: bpf$PROG_LOAD(0x19, 0x0, 0x0) 08:09:14 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) write$FUSE_ATTR(r0, &(0x7f0000002ac0)={0x78, 0x4, 0x0, {0x0, 0x0, 0x0, {0x50}}}, 0x78) 08:09:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) 08:09:14 executing program 5: pipe2$9p(&(0x7f00000012c0), 0x84000) 08:09:14 executing program 0: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x103240) 08:09:14 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) 08:09:14 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x40049409, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:09:14 executing program 3: bpf$PROG_LOAD(0x23, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:09:14 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 08:09:14 executing program 3: msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0xee00, 0xffffffffffffffff, 0x4, 0x3e30}, 0x0, 0x0, 0x7, 0xfe4, 0x9, 0x8e, 0x0, 0x400, 0x3, 0x5, 0xffffffffffffffff}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_ATTR(r0, 0x0, 0x1000000) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x58}}, 0x80) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000003e40)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) 08:09:14 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000002080)=ANY=[@ANYBLOB="f0030000", @ANYRES64=r1, @ANYRES32], 0x3f0) 08:09:14 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1391.957947][T30170] serio: Serial port pts0 08:09:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002100)=ANY=[@ANYBLOB="7f"], 0x38}}, 0x0) 08:09:14 executing program 1: socket(0x1, 0x0, 0x7f) [ 1392.716154][T29688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.997385][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.637219][T29451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.637368][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x13) 08:09:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:09:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001980)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 08:09:17 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, 0x0) 08:09:17 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[]}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:09:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) 08:09:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 08:09:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={0x0}}, 0x28801) 08:09:17 executing program 1: eventfd(0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_complete(0x0) io_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x1003, &(0x7f0000000540)={0x0, 0x20e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_enter(0xffffffffffffffff, 0x0, 0x155d, 0x2, &(0x7f00000007c0), 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0xf893, r0}) openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x24600, 0x0) 08:09:17 executing program 5: syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)) [ 1394.959062][ T28] audit: type=1326 audit(1654675757.807:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28a0c89109 code=0x0 08:09:17 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5409, 0x0) [ 1395.043922][T30208] serio: Serial port pts0 08:09:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 1395.126080][T30217] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1395.128754][T30217] VFS: Can't find a romfs filesystem on dev loop5. [ 1395.128754][T30217] [ 1395.276694][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:18 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000007c0), 0x44200, 0x0) 08:09:18 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 08:09:18 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) 08:09:18 executing program 1: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000600)=""/4096) 08:09:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x13) 08:09:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) 08:09:18 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:09:18 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 08:09:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@msize}]}}) 08:09:18 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) write$FUSE_ATTR(r0, &(0x7f0000002ac0)={0x78, 0x5}, 0x78) 08:09:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0xff, 0x427, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x48) [ 1395.961952][T30231] serio: Serial port pts0 08:09:18 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) 08:09:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@msize}]}}) 08:09:18 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 08:09:18 executing program 1: bpf$PROG_LOAD(0x8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:09:18 executing program 3: prctl$PR_GET_NAME(0x10, &(0x7f0000000280)=""/265) 08:09:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x13) 08:09:19 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1d33185a81a9955f"}) 08:09:19 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 08:09:19 executing program 1: syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@msize}]}}) 08:09:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 08:09:19 executing program 3: process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x0, 0x0, 0x0) 08:09:19 executing program 0: clock_getres(0x6, &(0x7f00000011c0)) 08:09:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@msize}]}}) 08:09:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000004300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000042c0)={&(0x7f0000000240)={0xd04, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xcf0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0xce8, 0x4, 0x0, 0x1, [{0xce4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xe1, 0x2, "8c544c968adcea1a87a9eea015eb34443a89386110290a2c3cbdb8f78d601644b9e4ee4a55d8565bc3498b6c69c41411086834a0f616afb542ad99e68ccf56eab63d2458e27771c583a9471bedce9cf746728f72f1b30dd4edf470c299313998f625c7a676aa0e32850eb110a00214eecde6d23f1d036a7a928fb4feb85bd1f71b23c69867b282c85bb142dfe02c8d6e63fd5ec55603898757ed9b47fabbe19f82d584e1a847cacdd52ace41fd14883ee1e84ff048d09ebbcdc54fa6a51198f2292935e27a236a457f544d7cfd3ad49bab9958932a26907a5c4d33955a"}, @NL80211_PKTPAT_MASK={0xbf9, 0x1, "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"}]}]}]}]}, 0xd04}}, 0x0) [ 1396.840552][T30265] serio: Serial port pts0 08:09:19 executing program 1: bpf$PROG_LOAD(0x18, 0x0, 0x0) 08:09:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 08:09:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x0) 08:09:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) 08:09:20 executing program 0: renameat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0) 08:09:20 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x22, 0x0, 0x0) 08:09:20 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) 08:09:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0xff, 0x427, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 08:09:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x8c, 0x1}, 0x48) 08:09:20 executing program 5: syz_clone(0x4801800, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000700)="ae090000000000000090f57f077030eff0f64ebbeed90cf41bdd2ac8bb8c43b460e46292d25133270b445393ec19", 0x2e}, {&(0x7f00000000c0)='S', 0x1}], 0x2) 08:09:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) 08:09:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="95"], 0x20}}, 0x0) 08:09:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1397.817475][T30291] serio: Serial port pts0 [ 1397.836346][T29451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x0) 08:09:21 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5414, 0x0) 08:09:21 executing program 3: syz_io_uring_complete(0x0) syz_io_uring_setup(0x0, &(0x7f0000000540), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 08:09:21 executing program 1: eventfd(0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffffff, 0x0, 0x8, 0x103) r0 = syz_io_uring_complete(0x0) io_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x1003, &(0x7f0000000540)={0x0, 0x20e0, 0x10, 0x2, 0xd2, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4d41, &(0x7f00000006c0)={0x0, 0x1a4b, 0x2, 0x0, 0x39e}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000740), &(0x7f0000000780)) openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x24600, 0x0) 08:09:21 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x3f}]}) 08:09:21 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) 08:09:21 executing program 0: bpf$PROG_LOAD(0xa, 0x0, 0x0) 08:09:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x8c, 0xffffffffffffffff, 0x417ba684}, 0x48) 08:09:21 executing program 2: bpf$PROG_LOAD(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:09:21 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x18, 0x3, &(0x7f0000001a80)=@framed, &(0x7f0000001b00)='GPL\x00', 0x5, 0xde, &(0x7f0000001b40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:09:21 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) 08:09:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) [ 1398.737115][T30319] serio: Serial port pts0 08:09:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = gettid() syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x540e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x0) 08:09:22 executing program 0: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) 08:09:22 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0xc000) 08:09:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) 08:09:22 executing program 2: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000100), 0x8) 08:09:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x117}, 0x14}}, 0x0) 08:09:22 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 08:09:22 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002740)={{0x0, 0x0, 0xee00, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 08:09:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x3, 0x0, 0x427, 0x0, 0x1}, 0x48) 08:09:22 executing program 5: bpf$PROG_LOAD(0x11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:09:22 executing program 2: syz_open_procfs(0x0, &(0x7f00000003c0)='timers\x00') 08:09:22 executing program 5: pselect6(0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000005c0)={0x1}, &(0x7f0000000600)={0x0, 0x989680}, 0x0) [ 1399.694974][T30344] serio: Serial port pts0 [ 1399.756811][T29451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.770791][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.321798][T29451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.396983][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:23 executing program 5: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 08:09:23 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, 0x0) 08:09:23 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000500)={0x3, 0x0, [{0x5, 0x0, 0x10}, {0x0, 0x0, 0x448d}, {0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:09:23 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 08:09:23 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) write$cgroup_type(r0, 0x0, 0x0) 08:09:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 08:09:23 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x181002, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x5450, 0x0) 08:09:23 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000011c0)={&(0x7f0000001180)='./file0\x00', 0x0, 0x8}, 0x10) 08:09:23 executing program 1: socket$inet6(0xa, 0x0, 0x1ff) 08:09:23 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000001dc0), 0x805c1, 0x0) 08:09:23 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) getgroups(0x2, &(0x7f0000000080)=[0xee00, 0xffffffffffffffff]) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) 08:09:23 executing program 1: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/199) 08:09:23 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0xe, 0x0) 08:09:23 executing program 4: syz_open_dev$vcsu(&(0x7f0000000040), 0xffffffffffffffff, 0x0) 08:09:23 executing program 3: prctl$PR_GET_NAME(0x10, &(0x7f0000000280)=""/265) socketpair(0x26, 0x0, 0x0, &(0x7f0000000100)) 08:09:23 executing program 2: timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)) 08:09:23 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, r2}, 0x10) 08:09:23 executing program 4: openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = io_uring_setup(0x5c39, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x38d}) io_uring_setup(0x261c, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 08:09:23 executing program 0: bpf$PROG_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:09:23 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/block/loop0', 0x0, 0x0) 08:09:23 executing program 5: syz_mount_image$romfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000001880)={[{'\''}, {'++@^#-@-}'}, {}, {'/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00'}, {'/dev/ttyS3\x00'}], [{@permit_directio}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'net.vip_udp_transmit\x00'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@uid_gt={'uid>', 0xee01}}]}) 08:09:23 executing program 2: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/110) 08:09:23 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) 08:09:23 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5424, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:09:23 executing program 1: bpf$PROG_LOAD(0x15, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:09:23 executing program 3: openat$vnet(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) 08:09:23 executing program 2: bpf$PROG_LOAD(0x16, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1400.976453][T30403] romfs: Unknown parameter ''' 08:09:23 executing program 1: sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="04002c"], 0x68}, 0x1, 0x0, 0x0, 0x2}, 0x24040890) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:23 executing program 5: syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1080c00, &(0x7f0000000300)) 08:09:23 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5424, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:09:23 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x121e40, 0x0) 08:09:23 executing program 2: write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x2088400, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="e2caa8b2e1e47d8368a58580fae3bb62a74749b459970f56cdddfb8f94155a") 08:09:24 executing program 4: syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)="a4") 08:09:24 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x474, 0x0, 0x1d, 0x0, 0x2d4, 0xf4030000, 0x3ac, 0x1fc, 0x1fc, 0x3ac, 0x1fc, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@private0, @local={0xfe, 0x37}, [], [], 'team0\x00', 'tunl0\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d0) 08:09:24 executing program 1: r0 = socket(0xa, 0x3, 0x8) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 08:09:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8923, &(0x7f0000000000)={'erspan0\x00', 0x0}) 08:09:24 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5424, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:09:24 executing program 1: openat$udambuf(0xffffff9c, &(0x7f0000000040), 0x2) 08:09:24 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x890c, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x3f7, 0x4, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, './file0'}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f00000007c0)) 08:09:24 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x5424, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:09:24 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000080)=ANY=[]}) 08:09:24 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0x10}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x5411, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev}]}, 0x20}}, 0x0) 08:09:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={0xffffffffffffffff, &(0x7f00000000c0)="12", 0x0}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x890c, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000001580)=ANY=[@ANYBLOB="6772657461703000000000000000000087d1bb03e3373cbb"]}) 08:09:24 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8943, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000080)=ANY=[]}) 08:09:24 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04002cbd"], 0x68}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x890c, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:24 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x0, 0x0, 0x9}, 0x48) 08:09:24 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x474, 0x0, 0x1d, 0x0, 0x2d4, 0xf4030000, 0x3ac, 0x1fc, 0x1fc, 0x3ac, 0x1fc, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@private0, @local={0xfe, 0x37}, [], [], 'team0\x00', 'tunl0\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d0) 08:09:24 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f0000001580)=ANY=[]}) 08:09:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x0, 0x0, 0x10000}, 0x48) 08:09:24 executing program 0: pipe(&(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000080)=ANY=[@ANYRES32=r0]}) 08:09:24 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8916, &(0x7f0000000040)={'gre0\x00', &(0x7f0000001580)=ANY=[]}) 08:09:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0x1}}}, 0x24}}, 0x0) [ 1401.613938][T30463] erspan0: refused to change device tx_queue_len 08:09:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x572}]}) 08:09:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0xf, @dev}]}, 0x20}}, 0x0) 08:09:24 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="04002cbd"], 0x68}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) 08:09:24 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) 08:09:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000b0}]}) 08:09:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x890c, 0x0) 08:09:24 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@can_delroute={0x14}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0x3, 0x9, @dev}]}, 0x20}}, 0x0) 08:09:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) 08:09:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004f40)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x0, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) 08:09:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) [ 1401.990437][T30499] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 08:09:24 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x1}]}}, &(0x7f00000021c0)=""/4107, 0x26, 0x100b, 0x1}, 0x20) 08:09:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000b0}]}) 08:09:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7}, 0x48) 08:09:24 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000040)=ANY=[]}) 08:09:24 executing program 3: bpf$MAP_CREATE(0x18, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) 08:09:25 executing program 0: pipe(&(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000080)=ANY=[@ANYRES32=r0]}) 08:09:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@can_delroute={0x2c, 0x19, 0x0, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x6}, [@CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x1}, 0x2, 0x2, 0x0, 0x0, "361534ce51c820a7"}, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040040}, 0x40400c0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) [ 1402.132889][T30509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:25 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x8918, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:25 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0xac242, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000080)=0x8, 0x7) 08:09:25 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x8936, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x890b, &(0x7f0000000080)={'syztnl1\x00', 0x0}) 08:09:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0x5fe60c1c67fec443, 0x9, @dev}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x30}}, 0x0) 08:09:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8923, &(0x7f0000000040)={'gre0\x00', &(0x7f0000001580)=ANY=[@ANYBLOB="6772657461703000000000000000000087d1bb03e3373cbb"]}) [ 1402.374084][ T28] audit: type=1800 audit(1654675765.217:583): pid=30531 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1172 res=0 errno=0 08:09:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000b0}]}) 08:09:25 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={0xffffffffffffffff, &(0x7f00000000c0)="12", 0x0}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0x5fe60c1c67fec443, 0x9, @dev}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x30}}, 0x0) 08:09:25 executing program 3: socket(0x25, 0x3, 0xfffffff8) 08:09:25 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0xac242, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000200)) lseek(r0, 0x0, 0x0) 08:09:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1402.418156][T30536] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 08:09:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x0, 0x0, 0x2}, 0x48) 08:09:25 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo\x00') 08:09:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0x5fe60c1c67fec443, 0x9, @dev}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x30}}, 0x0) [ 1402.592704][T30549] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1402.606171][ T28] audit: type=1800 audit(1654675765.457:584): pid=30551 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1161 res=0 errno=0 08:09:25 executing program 3: socket(0x25, 0x3, 0xfffffff8) 08:09:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f00000005c0)) [ 1402.722937][T30560] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 08:09:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000b0}]}) 08:09:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x1, 0x8bb5}, 0x48) 08:09:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0x5fe60c1c67fec443, 0x9, @dev}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x30}}, 0x0) 08:09:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x90001}) 08:09:25 executing program 3: socket(0x25, 0x3, 0xfffffff8) 08:09:25 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:25 executing program 3: socket(0x25, 0x3, 0xfffffff8) 08:09:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb}, 0x48) [ 1402.978094][T30576] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 08:09:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={0xffffffffffffffff, &(0x7f00000000c0)="125c36ec", 0x0}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0x12, 0x9, @dev}]}, 0x20}}, 0x0) 08:09:26 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x1, 0x0, 0x0, 0xc}]}}, &(0x7f00000021c0)=""/4107, 0x26, 0x100b, 0x1}, 0x20) 08:09:26 executing program 3: r0 = socket(0xa, 0x3, 0x8) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={0x0}}, 0x0) [ 1403.286128][T30596] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 08:09:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000080)=ANY=[@ANYRES32=r0]}) 08:09:26 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000040)=ANY=[]}) 08:09:26 executing program 0: socketpair(0x28, 0x0, 0x10001, &(0x7f0000000000)) 08:09:26 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0xac242, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000080)=0xdd, 0x7) 08:09:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x48) 08:09:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x8916, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x8914, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:26 executing program 0: socket(0x26, 0x5, 0x6) 08:09:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x9e}]}) [ 1403.510100][ T28] audit: type=1800 audit(1654675766.357:585): pid=30607 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1177 res=0 errno=0 08:09:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x8922, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x890b, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 08:09:26 executing program 1: syz_mount_image$vfat(&(0x7f0000001440), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x301003}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xfdef) open(&(0x7f0000000140)='./file0\x00', 0x141042, 0x0) [ 1403.596541][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x15}, 0x48) [ 1403.644402][T30616] ip6tnl0: mtu less than device minimum 08:09:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0xd, @dev}]}, 0x20}}, 0x0) 08:09:26 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) pipe(0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x1, &(0x7f0000000280)=@raw=[@exit], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) pipe(&(0x7f0000000780)) 08:09:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000080)=ANY=[@ANYRES32=r0]}) 08:09:26 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="9c") syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)="f8") [ 1403.794247][T30623] loop1: detected capacity change from 0 to 12304 08:09:26 executing program 4: mq_unlink(&(0x7f0000001000)='+{,)^\x00') 08:09:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x11}]}) [ 1403.841457][T30629] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1403.845367][T30623] FAT-fs (loop1): bogus number of FAT sectors 08:09:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8924, &(0x7f0000000000)={'erspan0\x00', 0x0}) 08:09:26 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) [ 1403.845387][T30623] FAT-fs (loop1): Can't find a valid FAT filesystem 08:09:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xb, 0x0, 0x0, 0x40}, 0x48) 08:09:26 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0xffff8000, [{0xc}]}]}}, &(0x7f0000000400)=""/156, 0x32, 0x9c, 0x1}, 0x20) [ 1403.961918][T27518] I/O error, dev loop1, sector 12160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 08:09:26 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000200)=""/219, 0x36, 0xdb, 0x1}, 0x20) 08:09:26 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) 08:09:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}]}, 0x28}}, 0x0) 08:09:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='t', 0x1}, {&(0x7f0000000040)="bdc8c45bfa0a16b28dc49ea9e87d3b67cadf1b09ca5c8794845a8720deed22", 0x1f}, {&(0x7f0000000680)="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", 0xea2}], 0x3}, 0x24040005) 08:09:27 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x80ffff}]}}, &(0x7f0000000400)=""/156, 0x26, 0x9c, 0x1}, 0x20) 08:09:27 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x1}]}}, &(0x7f0000000100)=""/193, 0x26, 0xc1, 0x1}, 0x20) 08:09:27 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000400)=""/156, 0x26, 0x9c, 0x1}, 0x20) 08:09:27 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0xc0000000, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/193, 0x1a, 0xc1, 0x1}, 0x20) 08:09:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 08:09:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x3b}]}) 08:09:27 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) [ 1404.257094][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xd3, &(0x7f0000000580)=[{&(0x7f0000000080)=""/78, 0x4e}, {&(0x7f0000000100)=""/205, 0xcd}, {&(0x7f0000000280)=""/121, 0x79}, {&(0x7f0000000380)=""/249, 0xf9}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/95, 0x5f}], 0x6}, 0x40002041) 08:09:27 executing program 4: socketpair(0x29, 0x2, 0x100, &(0x7f0000000000)) 08:09:27 executing program 3: syz_clone(0x8022000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:27 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x68, 0x0, 0x60}]}}, &(0x7f0000000080)=""/178, 0x2a, 0xb2, 0x1}, 0x20) 08:09:27 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000029c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000100)=""/182, 0x32, 0xb6, 0x1}, 0x20) 08:09:27 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) socketpair(0x0, 0x0, 0x0, &(0x7f00000004c0)) 08:09:27 executing program 4: syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:27 executing program 5: syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)='T') 08:09:27 executing program 1: syz_clone(0x32b20500, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:27 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x7400}]}}, &(0x7f0000000400)=""/156, 0x26, 0x9c, 0x1}, 0x20) 08:09:27 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000800000008000000088"], &(0x7f0000000180)=""/170, 0x9b, 0xaa, 0x1}, 0x20) 08:09:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000540)=""/46, 0x2e}], 0x1}, 0x40000002) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)="57a606cda2ce6b58b556d825e9f1e7b47c81fafc54cefc1f9c3401849c9b3b5233ee9ad9c8af6b2518e7acc7f42f35", 0x2f}], 0x1}, 0x0) 08:09:27 executing program 3: syz_clone(0x11200100, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:27 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}]}}, &(0x7f0000000400)=""/156, 0x32, 0x9c, 0x1}, 0x20) 08:09:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="bdc8c45bfa0a16b28dc49ea9e87d3b67cadf1b09ca5c8794845a8720deed22", 0x1f}, {&(0x7f0000000680)="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", 0xea2}], 0x2}, 0x0) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, 0x0, 0x60}, 0x0) 08:09:27 executing program 0: socketpair(0x2c, 0x3, 0x3, &(0x7f0000000000)) 08:09:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x18, 0x1, 0x1, 'l'}], 0x18}, 0x0) 08:09:27 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) 08:09:27 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000400)=""/156, 0x1a, 0x9c, 0x1}, 0x20) 08:09:27 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000840)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, 0x0}, 0x0) 08:09:27 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x9, 0x1}]}, @fwd={0x1}]}, {0x0, [0x61]}}, &(0x7f0000000200)=""/219, 0x43, 0xdb, 0x1}, 0x20) 08:09:27 executing program 4: socketpair(0x1d, 0x0, 0x9, &(0x7f0000001500)) 08:09:27 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0xa, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/193, 0x1a, 0xc1, 0x1}, 0x20) 08:09:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 08:09:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="9e", 0xec0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x100) 08:09:27 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x63, 0xc, 0x2, [@ptr]}}, &(0x7f0000000400)=""/156, 0x26, 0x9c, 0x1}, 0x20) 08:09:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)=[{0x10}], 0xf}, 0x0) 08:09:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x3}, 0x48) 08:09:27 executing program 4: socketpair(0x10, 0x3, 0xab, &(0x7f0000000280)) 08:09:27 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0xffffffe4}]}}, &(0x7f0000000400)=""/156, 0x26, 0x9c, 0x1}, 0x20) 08:09:27 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000500)=""/148, 0x26, 0x94, 0x1}, 0x20) 08:09:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 08:09:28 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x1, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x8}]}]}, {0x0, [0x61]}}, &(0x7f0000000500)=""/148, 0x33, 0x94, 0x1}, 0x20) 08:09:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x9, 0x0, 0x1000, 0x0, 0x1}, 0x48) 08:09:28 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x9b}}, &(0x7f0000000400)=""/156, 0x1a, 0x9c, 0x1}, 0x20) 08:09:28 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="851000000200000018270000", @ANYRES32, @ANYBLOB="00000000d0ffffff18560000060000000000000000000000186800000800000000000000010000008d961800ffffffff18180000", @ANYRES32, @ANYBLOB="0000000000000100181a1000", @ANYRES32, @ANYBLOB="00000000000000001841"], &(0x7f0000000ac0)='syzkaller\x00', 0x5, 0xba, &(0x7f0000000b00)=""/186, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:09:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000540)=""/46, 0x2e}], 0x1}, 0x40000002) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)='W', 0x1}], 0x1}, 0x0) 08:09:28 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@enum={0x9}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f00000002c0)=""/144, 0x2f, 0x90, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 08:09:28 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="071ed9ddade71890a777087cb9a6", 0xe}, {0x0}, {0x0}], 0x3, &(0x7f0000000a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14}}, @ip_retopts={{0x10}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x83, 0xc, "a58be63273493ce45d09"}, @generic={0x82, 0x3, "89"}]}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x61}}], 0x90}, 0x44011) 08:09:28 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@union={0x1}]}, {0x0, [0x61]}}, &(0x7f0000000400)=""/156, 0x27, 0x9c, 0x1}, 0x20) 08:09:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 08:09:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[{0x18, 0x1, 0x1, "9e19d5e5"}], 0x18}, 0x0) 08:09:28 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xb, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x9}, {0x800000c}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f00000002c0)=""/144, 0x3f, 0x90, 0x1}, 0x20) 08:09:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x9, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 08:09:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)=[{0x18, 0x1, 0x1, "e0"}], 0x18}, 0x0) 08:09:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) close(r0) 08:09:28 executing program 5: syz_clone(0x141000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x2, 0x0, 0xfffffffb}, 0x48) 08:09:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) 08:09:28 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000029c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x10}]}]}}, &(0x7f0000000100)=""/182, 0x32, 0xb6, 0x1}, 0x20) 08:09:28 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x1}]}, {0x0, [0x61]}}, &(0x7f0000000200)=""/219, 0x27, 0xdb, 0x1}, 0x20) 08:09:28 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r0}) 08:09:28 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000400)=""/156, 0x26, 0x9c, 0x1}, 0x20) 08:09:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x2}) [ 1405.516489][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.517587][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:28 executing program 0: socketpair(0x2b, 0x1, 0x2, &(0x7f0000000640)) 08:09:28 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@ptr={0x10, 0x0, 0x0, 0x2, 0x4}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x50, 0x0, 0x2f, 0x4}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x9, 0x3}, {0x0, 0x3}, {0x0, 0x2}, {0xd}, {0x1, 0x1}, {0x0, 0x1}, {0xb, 0x1505077c}, {0x9, 0x1}, {0x2, 0x2}, {0x10, 0x4}]}]}}, &(0x7f0000000400)=""/141, 0x92, 0x8d, 0x1}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@volatile={0xe, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x2e, 0x5f, 0x0, 0x30]}}, &(0x7f0000000100)=""/7, 0x2a, 0x7}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x8, 0x4, 0x9, 0x1, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x8}, 0x48) 08:09:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f0000000100)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1406.156354][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.156387][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:29 executing program 2: bpf$BPF_BTF_LOAD(0xf, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 08:09:29 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x2}]}}, &(0x7f0000000400)=""/156, 0x26, 0x9c, 0x1}, 0x20) 08:09:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}]}}, &(0x7f0000000080)=""/178, 0x2a, 0xb2, 0x1}, 0x20) 08:09:29 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000080000000100000006000085020000000400000005000000050000000700000004000000bd0000000500000000ff0d00000002000000040000000e00000005000000010000001000000002000000020000000f000000000000090200000006f700000000000205000000006130305f612e"], &(0x7f0000000840)=""/200, 0x8c, 0xc8, 0x1}, 0x20) 08:09:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) 08:09:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x10, 0x0, 0x0, 0x8000}, 0x48) 08:09:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x7fff, [{0x0, 0x5}]}]}}, &(0x7f0000000500)=""/148, 0x32, 0x94, 0x1}, 0x20) 08:09:29 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@func={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000300)=""/192, 0x2e, 0xc0, 0x1}, 0x20) 08:09:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x9, 0x7, 0x1002}, 0x48) 08:09:29 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002540)={&(0x7f00000023c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000002480)=""/146, 0x2d, 0x92, 0x1}, 0x20) 08:09:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d1", 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 08:09:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xb}, 0x48) 08:09:29 executing program 2: syz_clone(0x50304000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:29 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x4}, {0xe}, {0x9, 0x1}]}, @fwd={0x1}]}, {0x0, [0x61, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000200)=""/219, 0x52, 0xdb, 0x1}, 0x20) 08:09:29 executing program 1: socketpair(0x10, 0x3, 0xfeffffff, &(0x7f0000000000)) 08:09:29 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000680)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3}}, 0x10, 0x0}, 0x0) 08:09:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000100)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-arm\x00'}, 0x80, 0x0}, 0x0) 08:09:29 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)) 08:09:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000440)=ANY=[], 0x8) 08:09:29 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 08:09:29 executing program 0: socketpair(0x18, 0x0, 0x7ff, &(0x7f0000000340)) 08:09:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x8, 0x2, &(0x7f0000000580)=@raw=[@map_idx_val], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0xff000000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:09:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x8, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x48) 08:09:29 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5}}, @volatile]}}, &(0x7f0000000180)=""/153, 0x56, 0x99, 0x1}, 0x20) 08:09:29 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xfffff, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000400)=""/156, 0x26, 0x9c, 0x1}, 0x20) 08:09:29 executing program 3: socketpair(0x10, 0x3, 0x3, &(0x7f0000000280)) 08:09:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='t', 0x1}, {&(0x7f0000000680)="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", 0xec0}], 0x2}, 0x0) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, 0x0, 0x60}, 0x0) 08:09:29 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x600}]}}, &(0x7f0000000080)=""/178, 0x2a, 0xb2, 0x1}, 0x20) 08:09:29 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000140)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{}, 0x3}}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="046c1401f7ef440adf5fa84dbd33b0297976d234885f88c4efde5704c934b9f4442afe23c13ecca28fcc6d4266e5a6f7b0b3d54ac7e5ace17b1230cfd8915405769f352dd1ee3ab2216904acbe23c6c30f57f1bfbe38d355c70464188169a065c5edeb7601d33ba46e3e82b9ea1a14ebf5f0c0af80bd427aa2b38c933f1e32c4de7664349fca544615a9cb9b3a989801abe67990b5bbefd6ded9d94548e4dbedcd47dea219fa73ad084247fec221e70af2eb3f8a8dc820c7d2ed3228554eb685da2e830790c602a9085d1b8a2f636fd80007d932e288e207957867b8a2652bc5838c465a32b8bd117823e632f5f50db31af0ec0c0dd6fa670c27b6cf6537f7af11a00f1ed923b8562d5e878d14fc4faaf3c1271fae7f0774bdd739212dbd878d8e9a88ccaf275fc56ff64b939262739c78e0853e69dd74e2c8640cfb17541e3063e8d78cf045cc9450f67e59f6145615dbf7ba32dd66b707ddcdd7576ba926cd8ec398a9c5807ab43eb33087217a7761dd0d1b793f4f0e61f29626041e04b7e8c0ee2e5785beffcfbc9b1172428443408135d2ac3d7f17f54e7138da0515c01dd69b298c87e6d7c54d3eceb7e76838fdfcc0e99d433192de26e3760ada85af94333765630acf4ef708a5ed01c3215ca6e00a2e19edd88badc225606a0a3acff21de2c22a84ccbc1cb691247af3aba0a0aaa91700bb1dca1edc3e30b3fd40da88e4289b26ccaabd2c2549f9eaabccfda6e23c7b08eb05d037701a670b31de7888af6060e762052357a6699ac0ec412a5048e608f555f9503370270a2659593b82619834c244416b1420d4c5380cea5d557505de742f7fe72aea0bed799f954f5a81f0f9b22221709666851a958a1cd3a04460f720094e44699396b8fabcda6fbb8bdb30dcb70cf19d2d5fd88ce9c5fc689b9538f53c329f7be1ed6be903968abadfb762a39a7832395e531df7fdccd8d074c85ae8c55a3c9ec9b257502087cefeebe836eb707ed6011da89c6124ee70a485f4e7e5214d4af1ab94392c20f5e53a1c443fcde4421ea0578ec09a02a33b7bd8977278e673a39af590d66c5fcf996de7894c30fb2ecad260243df3d5e44bcd7423b229efed72901a58714f396251d7d465430cceedafd9958ba5976ea0b7788f8893426f450cb8cf0e223c261707addc8e413bae120bc9565759ff1c670d56724da541993ea8783bd7a42a6f049a6ff68423b898e7d6158872980276ef3f431ba80fa7322a962d6ea0a7485211aa613acc2ca6476813b460de294a5d2f77e79c111999ba2beeba013a5af0e108f660507322293b09c6f071604661fe5aab65b29ae94009517f0f0636aa89a0249966930d711f68400e7a51f93978cb97e9ab0b0761763a7ee0c89743adba65dcd63093b44b6ca4201c078dbd077cb063366770eff17d4dfb386d119068c6afc2c012160224fa5fbd38f0d9c447bed497cd952dd0278f628e0df1b5d72e177884797f05d987bdf83ee57a3607593570950932e2037f31e55a9b72fff5f6b0d13e93d55b51b3170e2b61c24af38816e8c6b7b257f38ffc597831e807870b5640f7eff17e0e7471ec566bcdc135c150f66caa7cac718d0fbe691e4730f07dcae0ee77efa37b8f72ad55813c970860938a7c61f24843c282a0989c84db6a0583a498b2d880d1d45dda253f0e8ec67267db3e5e6b652fe851a92234b1fb5fdae6f74eb42d55ab4d0c627ae8e69421cb34a674c4ddc78b2e7a6eada9a21109f3f5533a5375863ce418822c1c0e2870d09780614472c5ccaa889e449cfef5f8a70b133a1d161ed3928bf57f3496c12f876692879235da71eae9549b5b02a230146846a296b97d64bc970e388f2a9a51385305e829ff73ecbfa80b432f900f7033792b56d0267722d1637404fbf200bf8ff8530db96c6ccec9998ab1c657532060e7e581339f3ba3248b2b244a920c447ae03b8cc464153037635f5ee785253284fbb247447fe2ef7d5cfd6e42b4d3d587ec6b9767077836bdffb7b90e514ab94586ab912a3e81897f7095ac61f2db356a22eab1ee242525126d9c839d7be532f0e26b76ae54f089e880388038bc23936151d63792cfd665527f37f8a856863c691e4650d5ffaaf43276e3816109813a545125cb22ef87a0d59e4470e61e488361b19f76c195e6e8f5e59265340e5f3b59a665bea0d0b008139cdd758f3bcd6cb8278a2bee26434c9153296316adfcdca9df00304ea2c0dedaf715ee01276e480c9e2fdc19bcb3bf5963c9274abc4e17ece4dd61be4115689f1f5fac710c8269853ebb141fcf6e91c82857c3a29f1b9adf357fb3176170623386193815ff693b5cf365b50bca3d9cee30a144d91d8d7f68f590bb7a2783612163b698e141a9c985592afe6cc2582c4dcc2a197c5845d3d02e4c634381311186d9e8c6946879e68baa19d9a36c339a97ffc307515fb0a782e64e16f25ac67d98a7e957c768ada15e423f4d27354a65d7ffd5b9353f5fe7cff39aa8421e426c76d20e7f063d7487bdf9e9d7a3a3c05bfeb0c4847f75e4bbeb3cf0fee227c4ce399f08c6162f6e392251f519ecf67bfd157516c65c245c98a15e9c4f09b6b171c6ff00d30527b7f0d2fc1a53a5d5dea4f75c2432fc2a973edf8cff744edf885d48f8a765253fb4f522ff1ffb77dc14a8f4959f9443333c09d018c64e4af941597b1cc4b3c545d0300325d8156c94c52cfa41bfa963b050a28e61db8fb47fb6fc44f973d1d5e98dc1f9934b61e1f14955c59567b18be20138c1d966e46ad99022c5d87ef170cf79a5bab5af80027f24569cb1fd3259a1adf4c7c736de3db89d6afdf65dab8d779235a2352e9396d54a44da95152b0b9a3e358ec9daa6549f6b08658fb9e40a80f9a56e7a85c5e6c4a7c2dd0c7f7072e172dea9a7aad7fcc9c8d3c89a3362ff65a8d59d56b29e52d2b0ad4e721f40833ac3cf8af88887e9c25bce7d4c6dbe1de360c6b6e7af724eb4aae4e7aa8162dd87610c41f8c73d432d75b3433bcd0b5045aef8ef7f03c10a35c77e43da5ddc74847b0e9c88bec0cb28e52745d20b2fcf109ff4315a44b5748d45d2aca57fda60c1227910035526b72c73a0231030c0d0d1f85d40be3df54c683f0f600d21be8d230079a5d6f40aa2f75ae9752441d8be0e4c87777dee85b3d96b584b1d9c21908c6a58db3a69c6e272e158ddb6e91232c3dc09e72d7d42a87b548b9a9f3b37c81af6fa2a33f0a9ba19366ca7902ef76db463c38fb8c74768adcbb9d590a9353d5053c9d3badec84617d52e9bc5d313d9ecc8fe89c3814d442f6360d38ca185c1b00d2abcec6da5f91850495438c9e6a931db2112ca45afbc332833ce5205a3fe7cca30ba518ff290912121b7f62a879f520e1e052acf6be00488736407bf4c8035009935e07de5e8cf03011d4ca1740be3be9d6091a1aab64625fa9d5c9868532ca84053ceaa4d6b26fe0cd1ad78850118b2f4762b57fbfb96d16bfc47422deb670fd7ea40338cd4d5c58707087346fe42192278c5d16ce6b79f4e7f14b8850cfa181c9f3ecc387ff532e67510d0626661bd6e7eb34fd55ba89fdc999c5f4dc383656b6bc3bd32c25f7898850d70102056dbef8d7695d29b046ffc020e42b9d96eed259df59c3221f8d0919253811905b7f60e7f823be0476b6e71df98f82cb586e090c6c0a1bf06e19a615730372efc53e5b05feb7f037a445d2ade6a63d481e76669ebec709a4f283c8dc287371023f82138ab3f1675b63853fe2e36669d691130b8c6b002cc35a9d8500e986abfb2280a9df0e87ed0b8997c52733d8c24aecfb24996e8188a6c1114a2470a1bb54bb4f25f280240f802160ae6b7520f560d6324f3ec3e689b28714914a6ca5292729960ff57ed023dc19b54096265e4e8cb7a51b5aa36859c94ccdee4218b438895acef4976e3f341c5c4c7df8bf4ea312488dacd71d4da0702cf48c3ecca5d2f1ebbe0a62aa9b8099a016ed8a6a6ccfe3320cf81c6828038c9f5eee42043e700c725f564a38b7b500b8c511caf2e7412a6700fd148e8491d5329c34b28c9ab2af09190c7bd43034a3a5a6d340192680049f24e10e350953a1db1b004bb0d62d189e5abf522b334d8481be2111d6cbd746076c1f5f389085c8d8b66eec4014a3f893110ba7b47fd46fc9909abddb01d2b6fbf53c7895d8e78e808e2d18a3c23365689f0c513dc98d5be9545e3f54cad193216e4acb0b7f5d0892337c1dce1daafa81b822a1dbca948a0b1e5ae1b6617d3c7723296dfd4d2ea0cc59c715504d9f0cb8a18b1474ce13ce3bac77b41b9f397b43eec431821315f67c3d1998c047aec4ad67d51f9c9cfd69dd33a450a2ef748972e93cae65d368cdf608976e119edca404d43484697ef67ef69446df9d9c8f3fbdf4195a36fc3fa453e73c62c7f90db7364de8e8597bea5c6f2055de787166ead56fdfb8a7a75c5a9b2f3f34271a3885624e2dc877923303f8dadb212fdc63b3f760a48ebbee555d119ad74659f86c32b578441782f694fc8fbfd4686bc2effc569c2d67b1d06042897fa61dc14df197f556fb3b3086109bc4533c13bee11a51dbcf3dcb28377e7fdfb23086a2c5dd111544f90ecc72dab08dc2266f8427e43c1d9d448da2089dff17801f3468625c9fcd20f227f5ea48b84881710afe22888bf7ed3ae9a5fd74e4ef85d0e865c6f3e4ba69d15465819347572aa88ec9c5a874f6ec96a8f6164f847e7e7e00f5dc169e2f82eeab8e99bf7283369ecdbc502b9449203ee7fcc348334cd4e65f83c615e9fea29b87996b088bf0d1dfebb16b1b4644e324f625f9fc0740eb5f22745b735298dfc27a5428410c7188b999a0e6fd7a825a5a85f07b1ed252d71cef6f9fe8e6135dbaed4660ff1e222355ca2d9b12c333b28cc2ac14cbc798b47251032e71e9056307f197e68415e96cbfbf34414280bce65530348437fba6d4aeece9dbf9a8ac8b2", 0xdb9}], 0x2}, 0x0) 08:09:29 executing program 4: syz_clone(0x62043100, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 08:09:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x600, 0x0) 08:09:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="06", 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, 0x0, 0x60}, 0x0) 08:09:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="bd", 0x1}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) 08:09:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x140) 08:09:30 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000400)=""/156, 0x1000000, 0x9c, 0x1}, 0x20) 08:09:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)=[{0x18, 0x1, 0x1, "e0"}], 0x18}, 0x0) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2002) 08:09:30 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xd4040, 0x0) 08:09:30 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@union={0x1, 0x1, 0x0, 0x5, 0x1, 0x0, [{0xc}]}]}, {0x0, [0x61]}}, &(0x7f0000000400)=""/156, 0x33, 0x9c, 0x1}, 0x20) 08:09:30 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x48, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000400)=""/156, 0x1a, 0x9c, 0x1}, 0x20) 08:09:30 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x1}}}, 0x10, 0x0}, 0x0) 08:09:30 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4}, {0x9, 0x1}]}, @fwd={0x1}]}, {0x0, [0x61, 0x0, 0x0]}}, &(0x7f0000000200)=""/219, 0x45, 0xdb, 0x1}, 0x20) 08:09:30 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000023c0)={&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, &(0x7f0000002300)=[{&(0x7f00000000c0)="b37762c532ca6fd6909129268205cc95847b74fad24b7ed1e5a2749b45ff773ba63c3a7332d7913e290206ca070f7d27154e3ec7c45bac89f01c94d829d382415ee3f0bf07f65a22233429f260992bba765ab492929baf453341e131ab596f0ffbc490f9a946c1946ed309e6b7ba440a176fad6518ac0f65c397444831f7845bddb52d451860faa003e1fe2ca6b5c4501f7cfb2fa6d0c4158ed5a165b91ccf75d975bfa7a37ed9001965b8b3b8c224c59e334b5849e6fcb7c0a08f69b0d3c6696614c05182b04ec60034281bdb7aacbdc4e3b71fcd6fd3e8ab92775b5055d5758923e32d2824aec29811ea6dd6b98b1faa3f3760e131", 0xf6}, {&(0x7f00000001c0)="740f9316dfe0033274d7", 0xa}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="396975662f53e43437dcd245553e1184b44da505b9358963137035867263df2ca23906c88f7f7b60a5259acc799b21641c37683a6f4a006b9cfd868d91a806b0f405c5255bb1896e82bcdead5ec2d575e53b1598c9e52bbbb0d9927e2041b4b06ce6d48eb0723428feb7", 0xfffffeef}, {&(0x7f0000002280)="6baebffe5988fbf7b2d4e54a4c80012847fcd4da03888c6a4d76043a7fd608a487b238926f9974ec8411d2e30f0bac2244ee46455d0b3c488bb6a374212dddcb67", 0x41}], 0x6, &(0x7f0000002380)=[@ip_tos_u8={{0x11}}], 0x18}, 0x0) 08:09:30 executing program 2: syz_clone(0x56366000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:30 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000000000000000013"], &(0x7f0000000000)=""/156, 0x28, 0x9c, 0x2}, 0x20) 08:09:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1c}, 0x48) 08:09:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x0, 0xffff, 0xfffffffb}, 0x48) 08:09:30 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x2}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000340)=""/206, 0x28, 0xce, 0x1}, 0x20) 08:09:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x300, &(0x7f0000000380)}, 0x0) 08:09:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x80000001, 0x5822}, 0x48) 08:09:31 executing program 2: r0 = epoll_create1(0x0) r1 = socket(0x11, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 08:09:31 executing program 1: socket$inet_icmp(0x2, 0x2, 0x1) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000180), 0x0) 08:09:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x10, 0x1, 0x1}], 0x10}, 0x0) 08:09:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c}}], 0x20}, 0x0) sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)=[{0x18, 0x1, 0x1, "e0"}], 0x18}, 0x0) 08:09:31 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @volatile={0xf}]}}, &(0x7f0000000180)=""/153, 0x3e, 0x99, 0x1}, 0x20) 08:09:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x6, 0x0, 0x0, 0x285f, 0x0, 0x1}, 0x48) 08:09:31 executing program 2: r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000000)='S', 0x1) 08:09:31 executing program 1: creat(&(0x7f0000008a80)='./file1\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 08:09:31 executing program 0: memfd_create(&(0x7f0000000180)='F\x04K9\x04\x9f\xc5\x97\xa2DOq\xf0a2\xd3d:\xff\x1f\xf3\xab\f+~\xa4NO\xa6\xd6iD\x10\xa2\xc2\'\x88\xa7J\x9f\xe8\x84\xfa\xd4U\xdd\xa3\x8a\x03\x80\xe19\xba\x15?s\xaa\x848\xe8\xcd68=\xfa\x94\xc9\xa6\x82_\xbdY\xc8\x8b;B\x8ak\xea<\xda\xfc\x9cs\x1d\v\xb3V\x947ZB\x89\xf3\x8d\x8b\xe9\x80\x8dp~\xa6\xa0i`d\x92\xa6}[qq{\xbf7\x92\xc1\x06\x14Q$S\xf6\x85\xb2[\xda\x19)g\x9cb%d\xc2\xc1\xabQ\xf1\"\xe9U!\x98\x9b\xd4\xa2\xc5\x06g\x8d\xca@\xe6%\x8aq\x1a.\xc1\xfe.\x84\xe7-\xd0\b\x04\xbb\x1fH%/\x03\xab\x81\xc4\xb2=Ee\x0e\xa7\xc2\x83\xce{\xfc\xd2\x8f\xb7\x97M\xb4\\T\xd8Do\xe4\"\x12<\xe0\x95g@>\x81\x1f\xe2`\xc6/U&>\xb4E\x8d\x91\xc8 \xfbyF*{\xefJ\xbd\x9b\x89SeW\xe3Cmy\x94\xfb \f\x8e\v5z\x9e\x02\x10\xe0E/\x9f[\x14\xdd}\xea\"\xc7X\xa8\xe0\xb3\xfck\x12\x1b\xbaG\xb1\x90\xc4\x95\xc3!\x83\x1e\xd5\xfdKX\x18\xf5u\x0e_\x8d\xe9\x17\xa4\xfe\x0e\xe7\xcf\xb9\xf5k\x91\x9e\xe6\x01<<]\xe1a~lF\x05\x90\xc1\x10a\xf7T\xd0\xde\xe7#\xdfuu5\xd8\xef!\xa1\x99*\xf0:$~\xba]\x87\xd6\xd9l\x1b\xac\x91', 0x0) 08:09:31 executing program 2: r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@multicast1, @multicast1}, 0xc) 08:09:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x1, [{}]}, 0x110) 08:09:31 executing program 3: memfd_create(&(0x7f0000000380)='E\xfe\xff\x1f\xf3\xab\f+~\xa4NO\xa6\x96iD\x10\xa2\xc2\'\x88\xc3M\x9f\xe8\x84\xfa\xbd\x99\xe1\x91\x8a\x03\x80\xe19\xba\x15?s\xaa\x048\xe8\xcd68=\xfa\x94\xc9\xa6\x82_\xbdY3v\x1b\x93@\xd5a<\xda\xfc\x9cs\x1d\v\xb3V\x947ZB\x89\xf3\x8d\xe6P\xb0\x81\xb3\xd4\x00'/95, 0x0) 08:09:31 executing program 5: r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 08:09:31 executing program 1: creat(&(0x7f0000008a80)='./file1\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 08:09:31 executing program 3: creat(&(0x7f0000008a80)='./file1\x00', 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x3) 08:09:31 executing program 2: r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_buf(r0, 0x0, 0x2a, 0x0, 0x0) 08:09:31 executing program 0: creat(&(0x7f0000008a80)='./file1\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') creat(&(0x7f0000008a80)='./file1\x00', 0x0) rename(&(0x7f0000001480)='./file1\x00', &(0x7f00000014c0)='./file0\x00') 08:09:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2}, 0x80) 08:09:31 executing program 4: creat(&(0x7f0000008a80)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 08:09:31 executing program 1: creat(&(0x7f0000008a80)='./file1\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 08:09:31 executing program 2: setresuid(0xee01, 0xee01, 0x0) open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) 08:09:31 executing program 3: memfd_create(&(0x7f0000000000)='](]^$\x00', 0x3) 08:09:31 executing program 5: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 08:09:31 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast1, @local}, 0xc) 08:09:31 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f00000004c0)='./file0\x00', 0x0, 0xffffffffffffffff) 08:09:31 executing program 2: creat(&(0x7f0000008a80)='./file1\x00', 0x0) lchown(&(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, 0xffffffffffffffff) 08:09:31 executing program 1: creat(&(0x7f0000008a80)='./file1\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 08:09:31 executing program 3: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mknod(&(0x7f0000000400)='./file0/file1\x00', 0x0, 0x0) 08:09:31 executing program 5: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x40) 08:09:31 executing program 4: r0 = open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) 08:09:31 executing program 0: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) 08:09:31 executing program 3: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000001800)='./file0/file0\x00', &(0x7f0000001840), 0x0, 0x0, 0x0) 08:09:31 executing program 5: open(&(0x7f0000000600)='./file0\x00', 0x109dc2, 0x101) 08:09:31 executing program 4: r0 = socket(0x11, 0x80002, 0x0) write$nbd(r0, 0x0, 0x0) 08:09:31 executing program 1: syz_clone(0x0, 0x0, 0x35, 0x0, 0x0, 0x0) 08:09:31 executing program 2: setresuid(0xee01, 0xee01, 0x0) umount2(0x0, 0x0) [ 1408.851295][ T28] audit: type=1804 audit(1654675771.697:586): pid=30968 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir1339204997/syzkaller.MRQ9lW/2036/file0" dev="sda1" ino=1178 res=1 errno=0 08:09:31 executing program 0: semget$private(0x0, 0x2, 0x81) 08:09:31 executing program 3: semget$private(0x0, 0x1, 0x324) [ 1408.928926][ T28] audit: type=1804 audit(1654675771.777:587): pid=30972 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir451103192/syzkaller.4gsPgw/2353/file0" dev="sda1" ino=1165 res=1 errno=0 08:09:31 executing program 5: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 08:09:31 executing program 4: semget(0x1, 0x2, 0x300) 08:09:31 executing program 0: socket(0x2, 0x80002, 0x0) 08:09:31 executing program 1: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fchownat(r0, &(0x7f0000000080)='./file0\x00', r1, 0x0, 0x1000) 08:09:31 executing program 2: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, r0) 08:09:32 executing program 5: open$dir(&(0x7f0000000040)='./file0\x00', 0x40040, 0x0) r0 = getgid() chown(&(0x7f0000000080)='./file0\x00', 0xee01, r0) 08:09:32 executing program 3: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0xee00, 0x0) 08:09:32 executing program 0: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x301680, 0x4) 08:09:32 executing program 4: r0 = socket(0x11, 0x80002, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 08:09:32 executing program 2: socket(0x10, 0x80002, 0x0) 08:09:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') write$P9_RMKDIR(r0, 0x0, 0x0) 08:09:32 executing program 5: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) 08:09:32 executing program 0: semget$private(0x0, 0x6, 0x3b) 08:09:32 executing program 4: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', '/dev/null\x00'}, 0x0, 0x0, 0x0) 08:09:32 executing program 2: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) [ 1409.356325][T29451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:32 executing program 3: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x801, 0x98) 08:09:32 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x4c0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) 08:09:32 executing program 5: semget$private(0x0, 0x7, 0x101) 08:09:32 executing program 0: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x2) 08:09:32 executing program 2: setresuid(0xee01, 0xee01, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) 08:09:32 executing program 3: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x109002, 0x6) 08:09:32 executing program 4: open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.syz\x00', 0x0, 0x0, 0x1) [ 1409.501467][ T28] audit: type=1804 audit(1654675772.347:588): pid=31016 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir386760641/syzkaller.oRImID/1851/file0" dev="sda1" ino=1175 res=1 errno=0 08:09:32 executing program 1: setresuid(0xee01, 0xee01, 0x0) mount$9p_tcp(&(0x7f0000000200), &(0x7f00000003c0)='./file0\x00', &(0x7f0000001640), 0x0, 0x0) 08:09:32 executing program 5: semget$private(0x0, 0x1, 0x428) 08:09:32 executing program 0: semget$private(0x0, 0x4, 0x418) 08:09:32 executing program 3: syz_clone(0x2c248400, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:32 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0xfff, 0x0) [ 1409.614504][ T28] audit: type=1804 audit(1654675772.457:589): pid=31026 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir386760641/syzkaller.oRImID/1852/file0" dev="sda1" ino=1163 res=1 errno=0 08:09:32 executing program 4: open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.syz\x00', &(0x7f0000000080)='&\x00', 0x2, 0x1) 08:09:32 executing program 1: open$dir(&(0x7f00000002c0)='./file0\x00', 0x40040, 0x0) setresuid(0xee01, 0xee01, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) 08:09:32 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x1c10c2, 0x47) 08:09:32 executing program 2: open(&(0x7f0000000600)='./file0\x00', 0x24c0, 0x151) 08:09:32 executing program 5: shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) 08:09:32 executing program 1: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x4b) 08:09:32 executing program 4: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) r0 = getuid() r1 = getegid() chown(&(0x7f0000000000)='./file0\x00', r0, r1) 08:09:32 executing program 3: open(&(0x7f0000000600)='./file0\x00', 0x404c0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x100) 08:09:32 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x0) 08:09:32 executing program 1: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000000c0)='./file0\x00', r0, 0xee01) 08:09:32 executing program 4: prlimit64(0x0, 0x4, 0x0, &(0x7f0000000280)) 08:09:32 executing program 0: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0/file1\x00'}, 0x6e) 08:09:32 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40040, 0x0) 08:09:32 executing program 3: unshare(0x4c060600) 08:09:32 executing program 5: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x86) 08:09:32 executing program 4: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) [ 1410.036205][T29451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:32 executing program 1: semget(0x3, 0x3, 0x50) 08:09:33 executing program 0: open$dir(&(0x7f0000000200)='./file0\x00', 0x60040, 0x10) 08:09:33 executing program 2: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', '/dev/null\x00'}, 0x0, 0x0, 0x3) 08:09:33 executing program 1: semget$private(0x0, 0x4, 0x308) 08:09:33 executing program 4: open$dir(&(0x7f0000000200)='./file0\x00', 0x48040, 0x6) 08:09:33 executing program 2: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x130) 08:09:33 executing program 5: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) 08:09:33 executing program 0: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') readlink(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)=""/193, 0xc1) 08:09:33 executing program 4: open(&(0x7f0000000600)='./file0\x00', 0x404c0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x1) 08:09:33 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x8840, 0x150) 08:09:33 executing program 5: semget(0x3, 0x2, 0x307) 08:09:33 executing program 2: semget(0x0, 0x0, 0xb0) 08:09:33 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 08:09:33 executing program 0: semget$private(0x0, 0x4, 0x102) 08:09:33 executing program 4: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x1) [ 1410.487547][ T28] audit: type=1804 audit(1654675773.337:590): pid=31092 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1365506826/syzkaller.9GIBjR/1980/file0" dev="sda1" ino=1161 res=1 errno=0 08:09:33 executing program 5: semget(0x1, 0x0, 0xc4) 08:09:33 executing program 0: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x115) 08:09:33 executing program 2: r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0) fcntl$dupfd(r0, 0x0, r0) 08:09:33 executing program 1: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) setresuid(0xee01, 0xee01, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1410.556296][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.556752][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:33 executing program 4: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0) chmod(&(0x7f0000000000)='./file0/file0\x00', 0x0) 08:09:33 executing program 3: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) open$dir(&(0x7f0000000d00)='./file0\x00', 0x204001, 0x100) 08:09:33 executing program 5: r0 = semget$private(0x0, 0x4, 0x0) semget$private(0x0, 0x4, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000000)=""/142) 08:09:33 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0xc040) 08:09:33 executing program 1: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) setresuid(0xee01, 0xee01, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 08:09:33 executing program 0: semget$private(0x0, 0x0, 0x0) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000000)=""/16) 08:09:33 executing program 3: open$dir(&(0x7f0000000200)='./file0\x00', 0x41, 0x86a0053e668b6f5b) 08:09:33 executing program 5: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x140) 08:09:33 executing program 1: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x101880, 0x3b) 08:09:33 executing program 4: open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x4) 08:09:33 executing program 0: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) setresuid(0xee01, 0xee01, 0x0) chmod(&(0x7f0000000100)='./file0\x00', 0x0) 08:09:33 executing program 2: open$dir(&(0x7f00000002c0)='./file0\x00', 0x5c1, 0x0) setresuid(0xee01, 0xee01, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) 08:09:33 executing program 5: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x50) 08:09:33 executing program 3: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x801, 0x0) 08:09:33 executing program 0: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xee01) 08:09:33 executing program 1: semget$private(0x0, 0x3, 0x50) 08:09:33 executing program 2: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x60) 08:09:33 executing program 4: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0) removexattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)=@random={'osx.', '[.*}\xdb@\'(,/@\x00'}) 08:09:33 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x400c0, 0x11) 08:09:33 executing program 3: open$dir(&(0x7f0000000140)='./file0\x00', 0x40040, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x101, 0x4e) [ 1411.063356][ T28] audit: type=1804 audit(1654675773.907:591): pid=31141 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir386760641/syzkaller.oRImID/1859/file0" dev="sda1" ino=1165 res=1 errno=0 08:09:34 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0x7, &(0x7f0000000000), 0x0) 08:09:34 executing program 1: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 08:09:34 executing program 4: semget$private(0x0, 0x4, 0x202) 08:09:34 executing program 0: semget(0x0, 0x0, 0x80) 08:09:34 executing program 5: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0xee00) 08:09:34 executing program 3: open(&(0x7f0000000600)='./file0\x00', 0x605c0, 0x11) [ 1411.196269][ T28] audit: type=1804 audit(1654675774.037:592): pid=31152 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir386760641/syzkaller.oRImID/1860/file0" dev="sda1" ino=1169 res=1 errno=0 08:09:34 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x605c0, 0xd) 08:09:34 executing program 2: r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x141041, 0x0) write$binfmt_script(r0, 0x0, 0x0) 08:09:34 executing program 4: open$dir(&(0x7f0000000200)='./file0\x00', 0x60040, 0x0) 08:09:34 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0x7, &(0x7f0000000000), &(0x7f0000000040)) 08:09:34 executing program 3: semget$private(0x0, 0x2, 0x2c0) 08:09:34 executing program 5: setresuid(0xffffffffffffffff, 0xee01, 0xffffffffffffffff) [ 1411.196342][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:34 executing program 1: semget(0x3, 0x1, 0x202) 08:09:34 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$userns(r1, &(0x7f0000000040)) 08:09:34 executing program 5: open$dir(&(0x7f0000000040)='./file0\x00', 0x243, 0x0) 08:09:34 executing program 0: r0 = open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) close(r0) 08:09:34 executing program 2: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x1419c2, 0x0) 08:09:34 executing program 4: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0) setresuid(0xee01, 0xee01, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) 08:09:34 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x3000) 08:09:34 executing program 3: setresuid(0xee01, 0xee01, 0x0) syz_clone(0x8e008200, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:34 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x4c0, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0xa9) 08:09:34 executing program 0: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 08:09:34 executing program 2: open$dir(&(0x7f0000000200)='./file0\x00', 0x40240, 0x8) 08:09:34 executing program 1: semget(0x0, 0x0, 0x21) 08:09:34 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) write$nbd(r0, 0x0, 0xfffffffffffffd88) 08:09:34 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) 08:09:34 executing program 2: open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) 08:09:34 executing program 1: renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') 08:09:34 executing program 0: faccessat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) 08:09:34 executing program 3: pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 08:09:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) 08:09:34 executing program 5: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x100) 08:09:34 executing program 0: open(&(0x7f0000000600)='./file0\x00', 0x4c0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000) 08:09:34 executing program 2: munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) 08:09:34 executing program 1: socketpair(0x23, 0x0, 0x7, 0x0) 08:09:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) 08:09:34 executing program 4: socketpair(0x18, 0x0, 0x55, 0x0) [ 1411.916312][T29451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:34 executing program 5: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 08:09:34 executing program 0: socketpair(0x0, 0x0, 0x7, 0x0) 08:09:34 executing program 2: symlinkat(&(0x7f0000000840)='./file0\x00', 0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00') 08:09:34 executing program 1: faccessat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) 08:09:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) 08:09:34 executing program 0: munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 08:09:34 executing program 4: socket$unix(0x1, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000001b00)={{}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) 08:09:35 executing program 2: r0 = shmget(0x1, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/4096) 08:09:35 executing program 1: mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x4) 08:09:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) pipe(0x0) 08:09:35 executing program 3: madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 08:09:35 executing program 4: madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 08:09:35 executing program 0: r0 = shmget(0x1, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x2000) 08:09:35 executing program 3: utimensat(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0) 08:09:35 executing program 2: pipe(0x0) lchown(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 08:09:35 executing program 1: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x3010, 0xffffffffffffffff, 0x0) 08:09:35 executing program 4: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 08:09:35 executing program 5: shmctl$SHM_LOCK(0xffffffffffffffff, 0x3) 08:09:35 executing program 0: fchownat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x200) 08:09:35 executing program 2: munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 08:09:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x0, 0x0, "84"}, {0x10}], 0x28}, 0x0) 08:09:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x17, 0x82e, 0x0, 0x7, 0x0, 0x1}, 0x48) 08:09:35 executing program 5: syz_clone(0xe8808980, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x5, 0x4, 0x2, 0x81, 0x10, 0x1, 0xffffff81, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x48) 08:09:35 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0xb, &(0x7f0000000d00)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @btf_id, @ldst, @alu, @generic, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:09:35 executing program 2: madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xfffffffffffffffd) 08:09:35 executing program 1: semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f0000000000)=""/169) 08:09:35 executing program 3: syz_io_uring_setup(0x474e, &(0x7f0000000500)={0x0, 0x5677}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) 08:09:35 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x20) 08:09:35 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}]}}, &(0x7f0000000340)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 08:09:35 executing program 0: socketpair(0x28, 0x0, 0x8001, &(0x7f0000000000)) 08:09:35 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000003c0)=""/209, 0x1a, 0xd1, 0x1}, 0x20) 08:09:35 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1000000}]}}, &(0x7f0000001440)=""/199, 0x26, 0xc7, 0x1}, 0x20) 08:09:35 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@volatile={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000001440)=""/199, 0x29, 0xc7, 0x1}, 0x20) 08:09:35 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0xf}]}}, &(0x7f0000001440)=""/199, 0x26, 0xc7, 0x1}, 0x20) 08:09:35 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) 08:09:35 executing program 2: syz_clone(0x40104080, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:35 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x9, &(0x7f0000000d00)=@framed={{}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, @ldst, @alu, @generic, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:09:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001500)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 08:09:35 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}]}}, &(0x7f0000001440)=""/199, 0x26, 0xc7, 0x1}, 0x20) 08:09:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x48) 08:09:35 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10f041, 0x0) 08:09:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001500)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)='`', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000006c0)=[{0x10}], 0x10}, 0x0) 08:09:35 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x200014a1, 0xc, 0x2, [@volatile]}}, &(0x7f0000001440)=""/199, 0x26, 0xc7, 0x1}, 0x20) 08:09:35 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000001440)=""/199, 0x26, 0xc7, 0x1}, 0x20) 08:09:35 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000500)=""/252, 0x2a, 0xfc, 0x1}, 0x20) 08:09:35 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)={0x0, 0x0, 0x30}, 0x10) 08:09:35 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x48}}, &(0x7f0000001440)=""/199, 0x1a, 0xc7, 0x1}, 0x20) 08:09:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x5, 0x4, 0x2, 0x81, 0x0, 0x1, 0xffffff81, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 08:09:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x0, 0x0, 0x0, 0xc40}, 0x48) 08:09:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x0) 08:09:36 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000340)={{0x10, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000b00)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 08:09:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x0, 0x0, 0x200}, 0x48) 08:09:36 executing program 0: bpf$MAP_CREATE(0x14, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 08:09:36 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x408080, 0x0) 08:09:36 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x7}]}}, &(0x7f0000001440)=""/199, 0x26, 0xc7, 0x1}, 0x20) 08:09:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_macvtap\x00'}) 08:09:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 08:09:36 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000840)=""/249, 0x3b, 0xf9, 0x1}, 0x20) 08:09:36 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x4, 0x9}]}]}}, &(0x7f00000003c0)=""/209, 0x32, 0xd1, 0x1}, 0x20) 08:09:36 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x5}]}]}}, &(0x7f0000000840)=""/249, 0x36, 0xf9, 0x1}, 0x20) 08:09:36 executing program 2: syz_clone(0x14900000, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:36 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000340)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 08:09:36 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000001440)=""/199, 0x26, 0xc7, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x10) 08:09:36 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x5}}, &(0x7f0000001440)=""/199, 0x1a, 0xc7, 0x1}, 0x20) 08:09:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000900)={&(0x7f00000003c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, 0x0}, 0x0) 08:09:36 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x34000, 0x0) 08:09:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 08:09:36 executing program 1: syz_clone(0x40104080, &(0x7f0000000000)="4e3905194808d8a7d3ad1e9f83d48a2d54b5da6a15ff05d4577a6f9be1f4618f1e8d175d1b2f590534850d31c9c85b171ef076f525783cc5b1545bd28707c19133db46501520a6526c200960e299172e26e1fd9584f787e7e97ec3c86a5bc0838f5331ccf34294370212a504fa09f05ba89457d6f4ff9a7425b2bf7b2722516cfedaac7b26f6c9b30882ec69d42bb08156f86ed7c3470644e9644f5d7ed46ee3e57c676aba4a", 0xa6, 0x0, &(0x7f0000000100), &(0x7f0000000140)="3cd5a10c83426e9fd5606e730a28f9075a751b462ca2a6a9356ed9b455e18f05db9eaa2136ac1cf7") bpf$MAP_CREATE(0x3, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 08:09:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 08:09:36 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0xc6, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001440)=""/199, 0x1a, 0xc7, 0x1}, 0x20) 08:09:36 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x4004001) 08:09:36 executing program 3: socketpair(0x11, 0x0, 0x0, &(0x7f0000000500)) 08:09:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) 08:09:36 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x11}, 0x10) 08:09:36 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x3}]}}, &(0x7f0000001440)=""/199, 0x26, 0xc7, 0x1}, 0x20) 08:09:36 executing program 3: unlink(&(0x7f0000000980)='./file0/file0\x00') 08:09:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) 08:09:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000280)='\a', 0x1}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x0) 08:09:36 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 08:09:36 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0xd}]}}, &(0x7f0000001440)=""/199, 0x26, 0xc7, 0x1}, 0x20) 08:09:36 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x6}]}}, &(0x7f0000001440)=""/199, 0x26, 0xc7, 0x1}, 0x20) 08:09:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000680)={'veth1_to_hsr\x00', 0xe00}) 08:09:36 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x5}]}]}}, &(0x7f0000000840)=""/249, 0x36, 0xf9, 0x1}, 0x20) 08:09:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) 08:09:36 executing program 2: bpf$MAP_CREATE(0x3, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 08:09:36 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0xffffffff}, 0x8) 08:09:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x7, &(0x7f0000000340)=@raw=[@generic, @call, @jmp, @map_idx, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f00000003c0)='GPL\x00', 0x1, 0xe3, &(0x7f0000000400)=""/227, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 08:09:37 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x7, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001440)=""/199, 0x1a, 0xc7, 0x1}, 0x20) 08:09:37 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9}]}]}}, &(0x7f0000000840)=""/249, 0x2e, 0xf9, 0x1}, 0x20) 08:09:37 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000540)="08a3733fa93b88bc74da5d165d9d84c15eeb9699a00d6381fab15907517af28b40cd8450f281285f9b8ce2f6770a", 0x2e}, {&(0x7f0000000580)="e6ef9d851075eaccb40dc125d3093e9c17be2acfa10688f0971bf442a1aeae631ec4cb918d5e426755540e82baa81e673a2047d9a7e1605c770d1cf45e86261e365f6312031d7b125f49b101912147868d0ae54b8abe967e77183688c0abb5569bdd4df732e20e4c03d952e4a07880acb70e4d0e64f38927facffe0b32379d84073fb81f6c916c602ab8ea0e39a91e1b8204869d482aba700fd1ac97f25bd44231218a109df598faa280eb329b96f4936be18a5586ce09eb8d4911090e3352ae62f7cb96961cc4f5aa93bec751e6875b939a681d93a4236e9dfb9739a0ba65", 0xdf}, {&(0x7f0000000680)="0df40514004a88642d0730bcf13ed635f33ae49a5ed4a76034899a3298a02509eea9070c419d315f7b665f6e0dbfa8ecba83091ca4b70b8376434693b486456b4cd75f5a2c7aa8093529febd1cb7a279163fc5954fb024d6a14d30d73720ba280a7026d5711832cac3f698b95fb245da41b39a7bf7acc4e261d33838b6eae1d2b1cd0179b5b594d254bf6b9b49dca831a7090d06a85675161563bfbb8c292cebed5af9263217c70dde089293c753141763076dfd9c012c504d83981e0a133db342c9a1fcaff115332720f92c176f27044393af44269d34279ce5056c3bbb652d621c8fd7db28d82e521f07d731d5e9b48b3d497c0f64cfa649877ca522cda555697e3bf8942887e389720e0b5deac00b84242f4e4ffbd11914d29ac5a9c3eac8a4486e291a6a24e8c9a32fcecf965ff23f459232049d2ef371c87fd399a357f4e067c29a9b9e712388468e759c58f9851588601bcf06d7be66d3aec01b074d3b1a24a3478f010a2b281b40bb1704a50b1a8c998571fefa2841ce3c109946a1e36051288448acb9860835dd76d4cda80ba152d489694cd18815f56d1afe68a174c23468506efeaa8399cf0cde23c74974c5943b5982a925e4013d8fb8b2fdb2772a6724e810fb4bdd52dea4dfa4971e23fecc88387b26094cbce7cbaf82b34c75fb7575bd902976870c3d5d8619f3c9b33bc70f18fed6f8d63a8456a45c3814a1d4f8cfb5dd391dbab482319ac1a4d12cf2b2a9f568a4f9337b7bcde24d8f0c4b1c211ac848f27cbc4bb0688e5915a5751d2b167815a7b436f1d7d7827c328d2a88d6625627ae30edbbc3af062f2d3dc011730ce6083899085d2901f3759e6207791b9c6065576b05c5978f9ffef23d4176febe011b37613fb4c24dd85c3d0d94b42298da22a25d758fa03c49d042335c67696ecd3c532f30ca4ec991fc1a38f5e300ad0004115506b213b289d1a0e1b8b487c9b70192d44cd1c9a643ffddef54e4eb6aad71b474e8da9af7ef6af8d8f42ac4e21c95d5deadb08a165ac98669cff0ff453dee0ff95d0b2882158b2be4f37e097c1e1306408cebcbf8eab046deb70d35ed4230c6e3d6dfcc181df7705078a942f56bb709896a3d4da13badff5714f594ae58e77ed8205375a7e55275934fdecb6541657d1919a2511da349be430891ac02f1a0edd50655f9ae085766e71968d15271bbf75579743769d1d3d482a73f4d6ca10e901c227b6b345ede36aae62ba969ec5c377180d7605c3963e9bbe28ae428d86c40202ae3e3911d6fbb304cd946559d775095cf3e0e74d6ec283613c42a03096bad76b77658c465e9f69f4e7e431c7c07dbd0bcd960d3ce911fdcfbdc57cf59b80bbdfd671185be47a4e90ae07d70dbab6bddb5b617ab90350cdb384553492ac84e5ce6e28e00ea2772910a22c489af89bf980e537942817d2c9fa628e659ea1cbe8ada5bf7aa1bb1fabaa34b498e70ec55aae4136f85ca1aaae77bdfcd2b056702e6db48e12c46d2cb2256e07ecd297ff1cb95071f242a999eea8fc55488f66adc052656ffd8379613717ecfa1c501c799c40f8aab9d0b416c08bb11388630aad8b109fca5d12a76a5017559e942d54508c3979e484e82edeb82c6074671b2ded8f4bd3040efb54f085fd80ea05d3d8020761102ba650d50fde5b8223b9d7d4ca73d5193ed15a3032ae94887d0100c4205b6d4e1784c39044bfd18691aa482d373e196536900d2c0ce6152fa9b59ea901a4b72bfb4eae1fc54389d2c7958927e09e16c56f2607bd2686842a1b421857df87e2635ab1ffd046068750bcfc58dc1dfc64b21060214225ee4532ef29e5a7cf10a5ba4023aa9f9a14e9f8eb6f6ff25603d857f0a5eefc3f39e1240c2eac0da45af97665e3cf6cc3b9b125625bbbb39794fd7bd8a34b0557d92699841739cfcab68f0f24ee9897d75ca7fb3bde3f5c7ab6fa3dba2c9957b91e4b1fe06a43e393443ee569de07f29ceb9f70a08412a541e29160d462ea0f7813b60926d87d630f8f1960f4ee438749211f1851092fe2b5527cc0ab1c2bd7437164e8a75ad5874a121b188fcbfe97886d22895f3711e9c5e28313f15d72a70ae3129c1d30700b945f3b8f6b0a263bb7bb0eb372274c52bb0452e5651d25a9c2ca112e48217d0e314d81f7bcac84da3097c2c6ca5bd8c33f4b0f57ef91109f4a3aee7b9284bcd69919b9facf5d49333fe5ac1abfe4b57663aee716d29c1824de2ab2f1dff92a26b0215f39c2a9b94fc9e2be46689edb30e362b9126674963685e46bed7dfd5447bd187a250000bb1dcf524ba50f22c8f5a8686c4e79c6a9b84381816c8422dcf4a71908312616de440620dc47f290c0b4020108bd083e3b34b4b249a75d832c11b1fb331363170c73ee21001b51b64f2b3361f4796e8857b4ce611e0924a125a97ef64b178a8bc03297cf3288611a5583125ab1d575a27368f79fc2c11d8c9b7265ff6c67a8e97c516f275396f3386e6d9ad0224f9e565f16c1a54be8c9560f4e5a1c247e8bc5e225781e5c44d82ff647820656c0d916dcc788c5203fd7cb1ff92eac8916ecb321554f2bc18015daa1f404a28ef09acc795629451545c04e8dc71b1acae26580abdd78680d8a9759110ab4c6f6be6fda56efc65e1cd98870f6bab8d5d603d45644ec4d1d3528d9d6c9623411da9a853142e10c14953acef4ca88165e22ac62246633cd2d7a7ccbf42522f88f60f8e715031d7df754d866aeae751efb876ea0c79b0efe75e7bc030936b3b6bf771bb6ae1c644d04ca94328b7609d1b261196807102f01665c59d763fd90507924054413e37950d2ef12f2b4fdf8c741402bb38d951044970063453031ed54f76030ca82e8f46525307a7f60ab6deca441172dd1eda847e0bd9cf1e938b4a0c6dcdf9aa79d35a6ed07039fbdb730599d2ed68cd7be5524ab5e8f76e9b4e5eba1b08a645f6a2c4861b7eeb095e646434031f9fac10831013808976d1c9138cb7df03fff9b2a6ea7898645ac0467524846cea36af4a497879924e725614435f5b82dc5a4f4f59f173b88c7ad96bd628bfe1c99f7ce6472d6a83f551f846b2e36fd74f5388a49346e802f4a75f61ad55457b93392a054dcf02c3dbd7731df91d7c81dedd3470e20e35a5365a95750e3dc30d4771c71cbebc698b9c9b6fb812e623df0eae011bf53a092d2e07cb468a4b958aa5a1c2257e9aa2d1ae1b3b3690009d00e4859feb249c29e3e5de67151f3d8980ac357d6f6d72575308230be8bdedfd12daf9f7586bc0955e9e24e2782b7aafbee675b5ada2504d965781df530c99b1b72a4890030a5f4e77c7c1c026c2ad548195963e0b0c9539c08bb172ef38116758fc04049d7d9e65d20c1fd7c6afb54ffec7bf5e1b0a28cf3ce6e75a24be958af07a7ca37cc3d6cb7c8fcb2456a62d28ecf0a78c64a44bae8bbaea24f9ab2150aeea76671249dc7ebee0f93ad4b863901efda85e457b1ac6c1ab6a386f0dfac4b16290df9802b3b1d05c62e7dec8867bddbf24428234b4e28833d3c72c98505b6cb59a86f52d8005bd378ce8173977c84da630f46458c812b0f9ed491d761242a51816f2f3fd5d10ef581805228780b813ebf0ff4fdb0bfba4a41672d2508a34fa3c171644b43ebe009630da6c86d8130fa95b6afa4881265afc1464bc7e320df01327b4ed43b07e3fc582d1bee081aeb4726221e10754d055ab1ac4defb1124578d3ec5ce515ee8416881bb29cd025678cad923df21fbaa3fa22ab26210bc231cf87138317678f93f76e1c2ce2a5868785947f789ce0d8bb373fe6672b461493093369d2f282a662c77c349895edf246f4d9687eb235c5c0835b1c34e606f42931df75b0430f4b22b1c6bb0ae949266afe712db28117b45ff42b2772b3e240957380e749b74a76c6e020c3e9d545831240c3281ce229703fa0e2fd29afba94e18a12ed588ab41cb0757584ff773bb8ed6df431c40c3ff21ebc7cb36fe40040297f11f60e15e11b131fe398b811013977c6c0434d5001dc95b9c05e9ed52a9b721bdaa77603551af5561c85aee0714bdb391d54d3288e5822d5b01b961bf7d81923a124e467e3138b6341330e41c8592d18d0bad3240a9b2f064736a7916cb153171c2328ea0b75a486384a3deddbf7b0992ad1fdb81c40e50c15535ce68db0f92c0ea4a02e91d8452753424282008e2dfc7d241a9c562ebf1dee9b3819ac538207452340489882f68270d777303b06e0a527b13652dff30981276906f431e83e12b8b8e9efedcf7d5ca66081d596611f9fec47318e6223327592706eabea5061b9b7345cbaaa156e3f449048b", 0xbf3}, {0x0}, {&(0x7f0000001700)="b5", 0x1}], 0x5}, 0x0) 08:09:37 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}]}}, &(0x7f0000000340)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 08:09:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) 08:09:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000041c0)={0x0, 0x0, 0x0}, 0x40) 08:09:37 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RSTATFS(r2, 0x0, 0x0) 08:09:37 executing program 2: r0 = creat(&(0x7f0000002a40)='./file0\x00', 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) get_robust_list(r1, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) 08:09:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) 08:09:37 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x40) 08:09:37 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RREADLINK(r2, 0x0, 0x0) 08:09:37 executing program 0: semget(0x1, 0x4, 0x20596bdd1a4e9e82) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, 0x0, 0x0) openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001240)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000240)={r2, 0x0, "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", "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"}) pipe(&(0x7f0000000040)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 08:09:37 executing program 3: syz_clone(0x0, 0x0, 0x3a, 0x0, 0x0, 0x0) 08:09:37 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='statm\x00') write$nbd(r0, 0x0, 0x0) 08:09:37 executing program 4: r0 = inotify_init1(0x0) creat(&(0x7f0000002a40)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0/file0\x00', 0x106000b01) 08:09:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) 08:09:37 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), 0x0, 0x0, 0x1) 08:09:37 executing program 0: shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff7000/0x4000)=nil) 08:09:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='status\x00') write$nbd(r0, 0x0, 0xdd) 08:09:37 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ff9000/0x1000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) 08:09:37 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) renameat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') 08:09:37 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="11", 0x1}], 0x1}}], 0x1, 0x0) [ 1414.590858][ T28] audit: type=1400 audit(1654675777.437:593): avc: denied { setattr } for pid=31447 comm="syz-executor.1" name="fuse" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 08:09:37 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') 08:09:37 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$dupfd(r0, 0x0, r1) 08:09:37 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) read$FUSE(r0, 0x0, 0x57) 08:09:37 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@buf) 08:09:37 executing program 0: msgget$private(0x0, 0x420) 08:09:37 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTATFS(r0, 0x0, 0x0) 08:09:37 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x49800, 0x6) 08:09:37 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) 08:09:37 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RGETLOCK(r2, 0x0, 0x0) 08:09:37 executing program 1: semget(0x3, 0x2, 0x852) 08:09:37 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f0000002480), 0x0, 0x4080) 08:09:37 executing program 0: shmget(0x2, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) 08:09:37 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFLUSH(r0, 0x0, 0xfffffffffffffe82) 08:09:37 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, 0x0, 0x0) 08:09:37 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='statm\x00') write$P9_RREMOVE(r0, 0x0, 0x0) 08:09:37 executing program 1: semget(0x3, 0x0, 0x32) 08:09:37 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 08:09:37 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$cgroup_devices(r1, &(0x7f0000000200)={'b', ' *:* ', 'wm\x00'}, 0x9) 08:09:37 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ff9000/0x1000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) 08:09:37 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RFSYNC(r0, 0x0, 0x0) 08:09:37 executing program 1: shmget(0x2, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) 08:09:38 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RSETATTR(r2, 0x0, 0x0) 08:09:38 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='statm\x00') write$P9_RXATTRWALK(r0, 0x0, 0x0) [ 1415.116262][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:38 executing program 3: shmget(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) 08:09:38 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ff9000/0x1000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmdt(r1) 08:09:38 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 08:09:38 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$dupfd(r0, 0x0, r1) 08:09:38 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setgid(r1) 08:09:38 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ff9000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x3000) 08:09:38 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) 08:09:38 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCREATE(r1, 0x0, 0x0) 08:09:38 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 08:09:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0xfffffffffffffdd4) 08:09:38 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$9p(r2, 0x0, 0x0) 08:09:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x0) 08:09:38 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$nbd(r2, 0x0, 0x0) 08:09:38 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) setpgid(0x0, r1) 08:09:38 executing program 5: semget(0x3, 0x1, 0x9c) 08:09:38 executing program 1: r0 = creat(&(0x7f0000002a40)='./file0\x00', 0x0) write$P9_RCREATE(r0, 0x0, 0xffffffffffffff99) 08:09:38 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') write$P9_RLERRORu(r0, 0x0, 0xffffffffffffff65) 08:09:38 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) 08:09:38 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, 0x0) 08:09:38 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_ROPEN(r0, 0x0, 0x0) 08:09:38 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RREMOVE(r1, 0x0, 0x0) 08:09:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@private0}, 0x14) 08:09:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc) 08:09:38 executing program 2: r0 = creat(&(0x7f0000002a40)='./file0\x00', 0x0) write$P9_RFSYNC(r0, 0x0, 0xfffffffffffffe26) 08:09:38 executing program 0: syz_clone(0x22c4200, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:38 executing program 3: r0 = creat(&(0x7f0000002a40)='./file0\x00', 0x0) r1 = creat(&(0x7f0000002a40)='./file0\x00', 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RWRITE(r2, 0x0, 0x0) 08:09:38 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='statm\x00') r1 = socket$unix(0x1, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) 08:09:38 executing program 1: semget(0x3, 0x2, 0x284) [ 1415.756218][T29451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.774483][T29451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000004bc0), 0x0, 0x0) 08:09:38 executing program 2: r0 = shmget(0x2, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x0) 08:09:38 executing program 0: pipe(&(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r0, 0x0, 0x0) 08:09:38 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='statm\x00') r1 = socket$unix(0x1, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) 08:09:38 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RREADLINK(r1, 0x0, 0x10) 08:09:38 executing program 1: r0 = creat(&(0x7f0000002a40)='./file0\x00', 0x0) write$P9_RWRITE(r0, 0x0, 0xffffff98) 08:09:38 executing program 4: creat(&(0x7f0000002a40)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x80000000) 08:09:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r0, 0x0, &(0x7f0000000100)) 08:09:38 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) 08:09:38 executing program 3: shmget(0x3, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil) 08:09:38 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='statm\x00') r1 = socket$unix(0x1, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) 08:09:38 executing program 1: semget(0x3, 0x2, 0x9c) 08:09:38 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='statm\x00') write$cgroup_devices(r0, 0x0, 0x0) 08:09:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000041c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x0) 08:09:39 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWSTAT(r0, 0x0, 0x0) 08:09:39 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f00000025c0)=[{{&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @empty}}, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)="f0df687ab2f669afa443f87bf4512908199510418ba07f522e29db572b5b97b50eda3ad0dcd02c5d920fe85ba4614d2b7fd9dfee017470046bc51980504dd0af5c351949992864ce664434d30779f0b0a2472626ea085b0ca86e4bfb381b056c0f3b3a747e448bb8cc7c9e629e31bec0b1ca6444dade531760376158317322326e38de4c20005eaf5842a71ebe403a81788b6d481b6fab81f691aeadc6ea27dea03b00a942d1f5de7a5a91f722532bd7dd15ffffeb9f7eef9c764c6901f08769552a44a6cade5039d1970be98d1ced3f0a6ac1c96a192972d958cc9959dce1ce7a77712b6ab1048cfc5dc108e35c31c6"}, {&(0x7f00000002c0)="951a356c4522f566062ba1c8718b752940f3d5cdfcf98b0526ff7be98a055f8dc30a25df3fede3d8e129e2514b916b55363fe95da37fa962d50372fbcdd58cdb142cf902862c8275fe176d53f073d5fdf54b2d7805926954b34b02b6f3558bae6eed7d69ca2368a350f7cc4ad645762e840bc1cc514c12ff29422a70bbcab5593e8aee4c4d88f458a85be8894ba5d48c1c66d5af50a8458d60047deb7ad95c51bed835e07c5a9779e8a43dcb7f7331267a5da3e06b2f158a7444e7ec798e0dcc34952c4d5ee92eb8de833a8c7b32c705400df72d8dfea947587a32350fc993c4be4fbf496584b5"}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="7145a9611e2357a9cc508abd15fe101d30d8244fe882e3a60f72af4765023392da364ca09b9424fec8522b49ded8a3ce40abf5566864b5c2214c9bd6da2ddfeb994f37b998e7f78175821001b5bf4fdd5e87053ef5ac77a84db3a431b8b04cb4da87faa0e5fa3d41d021d0aaae462640280f67bb85fe721ab79e3bd51803f2a6d2be056064562d0e0d1ce497a220d5636c55b8b9248a13fb7b286a2b84d9e07e950485360eb64bdf5c714ffd0aa914082484c28e90d7d91a16c2c6deadd42d48aff3a6eae63c0446c08f6a816195ed6dc799571183b8af88d97a10c28f4954fcb4c8814b7821e519"}, {&(0x7f0000000500)="570f42fa3d45970ce01f610f8ec4600279cc9d64a348a8e0e4bfad6ea1a72cd444803a126d73de8ec5d1caa54d3b7bfd51a83dddb15930826721dd605d01a16ad19a91da10a8d936383f1984c07414bc2c396541f9f98552bf35b89d87592c3529f2c76dea565a19a1d3c259d0d9421b6add968dc954d0b36ff0fa3873050fbc878dea7751d9c11c14d5523f5f373727"}, {&(0x7f00000006c0)="b8b1b651505a9152fb6ba6bcc43b50028ef8065f81108644961bf1e6fe0d7af36c67cec18cf7a3822e93a4ddfe6e9d80a7b50b7119b22f113d7861d270676b5d9a87dd227a0ebc08dc6c836b7512e064c882d35e619368500727ae63df624eac6c33e4f51e62d25009fc9bd9a352ed00041eb10e060c3a"}], 0x0, &(0x7f00000005c0)=[@timestamping, @txtime]}}, {{&(0x7f00000007c0)=@x25, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000840)="173e009966b91a9f29c838211479814bba859e9a59ec68b136d463c5ef423894b66bbe256518946e3c4a8bb97fee0b260c0dd8ae1a432f6da7836abc6d365e6e750b8dbd43a17e7e1d223cde6c35bae6afde30ffbc38c52a6b252064003168eeb4bea1791f9bf2d3a048e6b456218ac17d51872662b7a9fa5008b2628005d4ef46f85daba8b8bf47141cb742929e682fee27473d1919f77dc50b9d02e7b3cdc9d1caefd40081a41a2a7b47490fb71eea35813d0511ffac6d"}, {&(0x7f0000000900)="317d1ead919ec29744deff0c2e23940abf408e16d30a9a40d9bfc5ea955f154493fb8282240fd8889caf43ede64b85240604282cce7f9a23374415c285a4ccde5d303a9554a1b224d46144498fe8c87a9a306edb2300c731a6844cf61ee6e957a3a3760e6fb9811ff5abdca4173a0f4f73877e8b8c906a344071dd3a798717d31b108f30066452a5e48e39a43ffb6be46d3539d3c212bdb36e"}], 0x0, &(0x7f0000000a00)=[@mark, @mark]}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)="a86e459f0def24e140795331a1ea5185f1b265d1252abd5fa2d12ebbc51c6e8eb96b15e83f7daf6add715dce6e48ed6b8466d619448161deecdb514e9f4eb96cc54a5b92269aa244f07bdd8e2f8b03d19da1953b0f435a1ae751eccc8a45c12dc89665425513e79f6f51089ac950cefa9090a4cb11fac1ea460a80b150fb42a07676ee8bde99159453c51b7af0632374a2a8d3848a0b3ce9732600fd059f4ec59b982fdb7fd49ee21d4d26fb6c33f0ac10d2a3a5d4"}, {&(0x7f0000000b00)="ec9dfd46954d3705f1237aa29d773d587e2dae14d6e9f2c6757f90ab42783b4caba2a9e7954b03075028bea675245957430757f7cfbea5742b"}, {&(0x7f0000000b40)="12"}], 0x0, &(0x7f0000000bc0)=[@mark, @mark, @txtime, @txtime, @mark, @txtime]}}, {{&(0x7f0000000c80)=@qipcrtr, 0x0, &(0x7f0000001040)=[{&(0x7f0000000d00)="b125818aa5ed28e02076fcc151e95b8e7f0b4db422266b16b44a433e99a41747766e034eebd5b4fe1a34a0ba3e36c41c2675e4e2255c5e1fe7c336a612c4e1a1f47eecc5c701b8dc5ea001bb9f5eb76624510be26d63c07ecb134e13dbe1c4cf8c4f53e3f56e3f48b97ab39a96386eef97c13a72da938dde"}, {&(0x7f0000000d80)="1d3b96e0790e97371c6d722d36f273c4b29def4c70ba052b737fc2e3dd3ee5aee5582482fc128a2848ba881532522b3a27814665783338dcee1bf343fe2ace79bd510f314676c5f37c3e9ca5ca70ca49859da0d3f01f7269ee134f4ef2b232b8db661dda89620cfc8ada9913f2ac71e769f34f457a498e4ff40eeb7bcd8fe69fa53277f036cd70d76cf970977c11178e"}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)="9593b7c379b03a9ed4e49ec4a0d57b54ce1c70a192f2bf39720908cb9c0f90ee178cb9f6591a540c0a5982fab78af5be10c769d3d8c1304511809548e3f29d6711ed7b7f3216a01bdc506b9811bb85d46c3e7767d339dac34d742d00b632126eda09c0a93fc9d26f541cf78a1216fc1f22c50b0f7c29c9ed991bab058d82ad04545964e503d86f8b055a6422eff7e63a0ad425041066afee38a6982b62a4334d0dccc9be3077a111ec40cf7a4662df69965c5190c4c7c788360b633178102f4c1614b818d6cc814944682ca3eac7ce5c536315fee6f3f4c7d7c5f2c8041a201eb043017c"}, {&(0x7f0000000f80)="9023af40e820fe5950328116698e7b27100821ec50d421d7cc1874dfbd212e3ef13571e5a585fdc6daa23a07e2b564b14cf6ee0b5a66188ad43b32a614dabd45b1f788b4360bd54f6b5ba7eca8337eccb2405f96f8a96d27b1197a07faeb9734da19568124595ba4c2e99b9369a7133717179da155f39f3b902221619dd3e9ee24068b0dd118fea9817228f4955d3ee3070f0f5b2e4e2f3c720305ea676e9b108c233f2d70e72f772cf01a20659ddf37108cc1fac2"}]}}, {{&(0x7f00000010c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, &(0x7f00000024c0)=[{&(0x7f0000001140)="f07b96d0c50c3f28cc69b799617c047b851fdebb4fb6d823010db252e5910ee8df3b98898673779268a84c687bd427f264403a55"}, {&(0x7f0000001180)="19e1b20bfbb661412a6ff40a"}, {&(0x7f00000011c0)="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"}, {&(0x7f00000021c0)="d8cb6a22f3bb291260948f0c0e622a19d51393e36fd3ef42daac60a0f1adcf47171f5542c0843ab7080e7e4fababe88f22644a2a1d85"}, {&(0x7f0000002200)="b857b4cc7d126d442246de208c84b95c239188330d419f80b15d7ac29df350951d03fa328fc528fa676ede86426316f1d1455a0fff442a2020eb6fddaaa15a3b0c6c2dd3e9aa8e7de1587c1df2825e"}, {&(0x7f0000002280)="04e9692343af8fff3c995d93c3b89e87ebe6db4e6864496714396cc507e79e012c0a9790fc1a6d20c7c7dcf48947b680a830cf7251911defeaf7a1d7fa2bc524cea8cb0f30c7b8ca13ad141b4262116d2b8d4d37f882e294e606d86970f16d440df00cb415bf78f1aea98c38d8f1d3ce6c17db13a49e4fd2255e48105705c01bd6f22ff2dd210b40e7da784ddfb40da42b658d40522d1c07a31c44387d8584d67246e7"}, {&(0x7f0000002340)="09189d24ee2da8cd107688d324a2425473e3302331b999096f771560e305b97433355d83f3a0e86dde79932bf80633955382904d8572e1dc0262"}, {&(0x7f0000002380)="db5f3c182ae32a00741af47c2cf98ef612161be123538c2453f634c82cd4c9e369e13b950ab58b104b0d0589eae984714d88"}, {&(0x7f0000002400)="970e97cb06ff40d290d746fb4639d8dc89b92b9fa1fe6806d7febc37ef11e31d43d51fa1e9251960324f1db79914aba0f9f1e117b333c8ce9bedb49879cab921db08d46e5d726a5233a9c29b9d00048cdcd33d2f0b9bb3ec9aea798017db92a5b0d9303049a9986896caeaa7413eb4f58a0804caf5009eafda7fa7ebf309ac04ea26f7b09a307d52b29c6fc77fcabf309305ff9821975ef7323dd4"}], 0x0, &(0x7f0000002580)=[@mark]}}], 0x3, 0x40) 08:09:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='statm\x00') r1 = socket$unix(0x1, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) 08:09:39 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x80) 08:09:39 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) renameat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') 08:09:39 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) getpeername$netlink(r2, 0x0, 0x0) 08:09:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, 0xfffffffffffffffd, 0x0, 0x80) 08:09:39 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = creat(&(0x7f0000002a40)='./file0\x00', 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) write$P9_RFLUSH(r2, 0x0, 0x0) 08:09:39 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RLERROR(r1, 0x0, 0x0) 08:09:39 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) getpgrp(r1) 08:09:39 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 08:09:39 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000001200)=ANY=[], 0x10) 08:09:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$FIOCLEX(r2, 0x5451) 08:09:39 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000040)={0x18}, 0xfffffffffffffedc) [ 1416.406235][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:39 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='statm\x00') fcntl$dupfd(r0, 0x0, r0) 08:09:39 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RFLUSH(r2, 0x0, 0x0) 08:09:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000280), 0x4) 08:09:39 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000023c0)=0x0) getpgrp(r1) 08:09:39 executing program 4: r0 = creat(&(0x7f0000002a40)='./file0\x00', 0x0) write$P9_RSETATTR(r0, 0x0, 0x2c) 08:09:39 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RLERRORu(r2, 0x0, 0x0) 08:09:39 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) renameat(r0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') 08:09:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) [ 1417.042441][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:40 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4080) 08:09:40 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='statm\x00') read$eventfd(r0, 0x0, 0x0) 08:09:40 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$eventfd(r2, 0x0, 0x0) 08:09:40 executing program 0: semget(0x3, 0x2, 0x486) 08:09:40 executing program 5: semget(0x3, 0x3, 0x290) 08:09:40 executing program 1: r0 = creat(&(0x7f0000002a40)='./file0\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r1) 08:09:40 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, 0x0, 0x4040801) 08:09:40 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000880)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d7e9e3f7c4b69a91c8af1203c2d90cfb8492693580879165d7d553969fedd170f1114f2524e117093f899a81ba3067624e9de8b1edee7a6a76db3e84838fc2"}, 0x80) 08:09:40 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RWRITE(r2, 0x0, 0x0) 08:09:40 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ff9000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x1000) 08:09:40 executing program 1: semget(0x0, 0x1, 0x0) 08:09:40 executing program 0: semget(0x3, 0x1, 0x301) 08:09:40 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) 08:09:40 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x20040001, 0x0, 0x0) 08:09:40 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x0) 08:09:40 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, 0x80) 08:09:40 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 08:09:40 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00') setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 08:09:40 executing program 0: semget$private(0x0, 0x2, 0x2a0) 08:09:40 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0x0, 0x4000880, &(0x7f0000000100)=@abs, 0x6e) 08:09:40 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) 08:09:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000070c0), 0x0, 0x0) 08:09:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect(r0, &(0x7f00000031c0)=@l2tp={0x2, 0x0, @private}, 0x80) 08:09:40 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp\x00') recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) 08:09:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40002121) 08:09:40 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0x0, 0x40048d0, &(0x7f0000000100)=@abs, 0x6e) 08:09:40 executing program 2: r0 = epoll_create(0x9) epoll_pwait2(r0, &(0x7f0000000300)=[{}], 0x1, &(0x7f0000000340), 0x0, 0x0) 08:09:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) 08:09:40 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:40 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0xffffff2a, 0x0, &(0x7f0000000180)=@abs, 0x6e) 08:09:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000500)="1b", 0x1) 08:09:40 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp\x00') write$cgroup_netprio_ifpriomap(r0, 0x0, 0xfffffffffffffc57) 08:09:40 executing program 0: semget(0x3, 0x1, 0x80) 08:09:40 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:40 executing program 5: semget$private(0x0, 0x3, 0x58) 08:09:40 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x20040001, &(0x7f0000000880)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d7e9e3f7c4b69a91c8af1203c2d90cfb8492693580879165d7d553969fedd170f1114f2524e117093f899a81ba3067624e9de8b1edee7a6a76db3e84838fc2"}, 0x80) 08:09:40 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x801, 0x0, 0xfffffdfe) 08:09:40 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, &(0x7f00000030c0)) 08:09:40 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0x0, 0x20004091, 0x0, 0x0) 08:09:40 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x140, &(0x7f0000002440)={0x77359400}) 08:09:40 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0x0, 0x40048d0, 0x0, 0x0) 08:09:40 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00') write$P9_RREADLINK(r0, 0x0, 0xfffffffffffffed1) 08:09:40 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:40 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000003080)) recvmmsg$unix(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 08:09:41 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 08:09:41 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp\x00') read$FUSE(r0, 0x0, 0x1b) 08:09:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f00000002c0), 0x0, 0x8000) 08:09:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000028c0)={@private0}, 0x14) 08:09:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@buf) 08:09:41 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0x0, 0x40001, 0x0, 0x0) 08:09:41 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/32, 0x20, 0x0, 0x0, 0x0) 08:09:41 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ifreq(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00', @ifru_addrs=@ethernet={0x0, @remote}}) 08:09:41 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp\x00') getsockname$unix(r0, 0x0, 0x0) 08:09:41 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0x0, 0x4, 0x0, 0x0) 08:09:41 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x4c, 0x0, &(0x7f0000000880)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d7e9e3f7fdbc9a91c8af1203c2d90cfb9eab000080879165d7d553969fedd170f1114f2541b6000000899a81ba3067627a9de8b1e9ee7a6a76fb3e84838fc2"}, 0x80) 08:09:41 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp\x00') connect(r0, 0x0, 0x0) 08:09:41 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) 08:09:41 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00') sendmsg(r0, 0x0, 0x0) 08:09:41 executing program 1: semget$private(0x0, 0x2, 0xe3) 08:09:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x8000) 08:09:41 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0x0, 0x4, &(0x7f0000000100)=@abs, 0x6e) 08:09:41 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 08:09:42 executing program 0: semget(0x3, 0x3, 0x103) 08:09:42 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, &(0x7f00000030c0)) 08:09:42 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 08:09:42 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp\x00') setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) 08:09:42 executing program 5: sendto$unix(0xffffffffffffffff, 0x0, 0xfffffffffffffda3, 0x0, &(0x7f0000000100)=@abs, 0x6e) 08:09:42 executing program 2: semget$private(0x0, 0x2, 0x40) 08:09:42 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp\x00') sendmsg$inet(r0, 0x0, 0x0) 08:09:42 executing program 5: semget(0x3, 0x0, 0x80) 08:09:42 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ifreq(r0, 0x8933, 0x0) 08:09:42 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r1, &(0x7f0000001880)='net/psched\x00') 08:09:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 08:09:42 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0x5450, 0x0) 08:09:42 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x1, 0x0) [ 1420.241862][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:43 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/224, 0xe0}], 0x1}, 0x40) 08:09:43 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/226, 0xe2}], 0x1}, 0x0) 08:09:43 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:09:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 08:09:43 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/224, 0xe0}], 0x1}, 0x0) 08:09:43 executing program 5: msgget$private(0x0, 0x30a) 08:09:43 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0x0, 0x4000880, 0x0, 0x0) 08:09:43 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40) 08:09:43 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000080)=ANY=[], 0x70) 08:09:43 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 08:09:43 executing program 1: r0 = epoll_create(0x7fff) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, 0x0) 08:09:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8913, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) 08:09:43 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@abs, 0x6e) 08:09:43 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)) 08:09:43 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, 0x0, 0xb3) 08:09:43 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe) [ 1420.886300][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:44 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x8040) 08:09:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000500)={0x0, {0x0, 0x5a75}}) 08:09:44 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0x0, 0x40001, &(0x7f0000000100)=@abs, 0x6e) 08:09:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 08:09:44 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r0, 0x0, 0x40012020) 08:09:44 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp\x00') ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, 0x0) 08:09:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_pts(r0, 0x0) 08:09:44 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x5421, &(0x7f0000000680)={0xff01}) [ 1421.516273][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.535971][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 08:09:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045564, 0x0) 08:09:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x4b47, 0x0) 08:09:44 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x1, 0x0, 0x4}, 0x20) 08:09:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x4004556b, &(0x7f0000000680)) 08:09:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB='4'], 0x33fe0}}, 0x0) 08:09:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x13, 0xa, 0x201}, 0x14}}, 0x0) 08:09:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000500)={0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}) 08:09:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0xfffffdef}}, 0x0) 08:09:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 08:09:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0xc0189436, 0x0) 08:09:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x4020940d, &(0x7f0000000680)) 08:09:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x406855c9, &(0x7f0000000680)) 08:09:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x48}, 0x0) 08:09:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x4000}, 0x0) 08:09:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x5452, &(0x7f0000000680)={0xff01}) 08:09:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300c0000000000011000000080211000001"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) sendfile(r5, r1, 0x0, 0x100000004) 08:09:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 08:09:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x34}, 0x1, 0x0, 0x2}, 0x0) 08:09:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00'}, 0x2000049c) 08:09:44 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00'}, 0x45c) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) 08:09:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x4004556d, 0x0) 08:09:44 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) sync() 08:09:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0xc0045878, 0x0) 08:09:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x300}, 0x0) 08:09:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045566, &(0x7f0000000680)) [ 1422.071096][T31872] input: syz0 as /devices/virtual/input/input28 08:09:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x40045565, &(0x7f0000000500)='syz0\x00') 08:09:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$inet6(r0, 0x0, 0x0) [ 1422.156130][ T29] INFO: task kworker/1:38:20060 blocked for more than 143 seconds. [ 1422.166166][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.177019][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.185507][ T29] Not tainted 5.19.0-rc1-syzkaller #0 [ 1422.192491][ T28] audit: type=1804 audit(1654675785.037:594): pid=31881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir109162605/syzkaller.5ME36M/2299/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 1422.206499][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1422.302164][ T28] audit: type=1400 audit(1654675785.047:595): avc: denied { ioctl } for pid=31861 comm="syz-executor.1" path="socket:[132708]" dev="sockfs" ino=132708 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1422.319757][ T29] task:kworker/1:38 state:D stack:24384 pid:20060 ppid: 2 flags:0x00004000 [ 1422.357513][ T29] Workqueue: usb_hub_wq hub_event [ 1422.362745][ T29] Call Trace: [ 1422.369089][ T29] [ 1422.372149][ T29] __schedule+0xa00/0x4b30 [ 1422.377732][ T29] ? find_held_lock+0x2d/0x110 [ 1422.382818][ T29] ? wq_worker_sleeping+0x1e5/0x250 [ 1422.388802][ T29] ? io_schedule_timeout+0x140/0x140 [ 1422.394339][ T29] ? lockdep_hardirqs_on+0x79/0x100 [ 1422.400137][ T29] schedule+0xd2/0x1f0 [ 1422.404444][ T29] schedule_preempt_disabled+0xf/0x20 [ 1422.410856][ T29] __mutex_lock+0xa70/0x1350 [ 1422.415546][ T29] ? add_early_randomness+0x1a/0x170 [ 1422.421178][ T29] ? mutex_lock_io_nested+0x1190/0x1190 [ 1422.427038][ T29] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 1422.432804][ T29] ? hwrng_init+0x29e/0x350 [ 1422.437888][ T29] ? hwrng_manage_rngd+0x160/0x160 [ 1422.443204][ T29] add_early_randomness+0x1a/0x170 08:09:45 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) sync() 08:09:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x20) 08:09:45 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$rfkill(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x40000000002, 0x3, 0x80000000002) dup2(r1, r0) 08:09:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x40045565, 0x0) 08:09:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300c0000000000011000000080211000001"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) sendfile(r5, r1, 0x0, 0x100000004) 08:09:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x1}, 0x20) [ 1422.448596][ T29] hwrng_register+0x399/0x510 [ 1422.453404][ T29] chaoskey_probe+0x7b5/0xc40 [ 1422.458895][ T29] ? chaoskey_suspend+0x40/0x40 [ 1422.472183][ T29] ? _raw_spin_unlock_irqrestore+0x50/0x70 08:09:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, 0x0) 08:09:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x406855c9, &(0x7f0000000680)={0xff01}) 08:09:45 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) sync() 08:09:45 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f00000000c0)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x1000000000004e20, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r0, 0x0, 0xfffffffffffffd43, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) [ 1422.516721][ T29] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1422.536977][ T29] usb_probe_interface+0x315/0x7f0 08:09:45 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280001"], 0x28}}, 0x0) [ 1422.575785][ T29] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 1422.581235][ T29] really_probe+0x23e/0xb90 08:09:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x4020940d, &(0x7f0000000680)={0xff01}) 08:09:45 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f00000000c0)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e602721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669c24c206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb25c89074fcb1bba20c41bddd9ca5cd2f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60be632697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20f4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x1000000000004e20, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r0, 0x0, 0xfffffffffffffd43, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) [ 1422.628164][ T29] __driver_probe_device+0x338/0x4d0 [ 1422.648280][ T29] ? usb_match_id.part.0+0x15d/0x1b0 [ 1422.669470][ T29] driver_probe_device+0x4c/0x1a0 08:09:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x5421, 0x0) [ 1422.684126][ T29] __device_attach_driver+0x20b/0x2f0 [ 1422.700701][ T28] audit: type=1804 audit(1654675785.547:596): pid=31907 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir109162605/syzkaller.5ME36M/2300/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 08:09:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x400c55cb, &(0x7f0000000680)={0xff01}) 08:09:45 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) sync() [ 1422.765975][ T29] ? driver_allows_async_probing+0x170/0x170 [ 1422.784802][ T29] bus_for_each_drv+0x15f/0x1e0 [ 1422.797730][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.804445][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.836950][ T29] ? bus_for_each_dev+0x1d0/0x1d0 [ 1422.846731][ T29] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1422.876018][ T29] ? lockdep_hardirqs_on+0x79/0x100 [ 1422.902665][ T29] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1422.921769][ T29] __device_attach+0x1e4/0x530 [ 1422.939306][ T29] ? device_driver_attach+0x210/0x210 [ 1422.944754][ T29] ? kobject_uevent_env+0x2ac/0x1660 08:09:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300c0000000000011000000080211000001"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) sendfile(r5, r1, 0x0, 0x100000004) 08:09:45 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0) 08:09:45 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f00000000c0)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e602721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669c24c206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb25c89074fcb1bba20c41bddd9ca5cd2f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60be632697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20f4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x1000000000004e20, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r0, 0x0, 0xfffffffffffffd43, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 08:09:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x2, 0x0) 08:09:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) 08:09:45 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x5460, 0x0) [ 1422.952696][ T29] bus_probe_device+0x1e4/0x290 [ 1422.966076][ T29] device_add+0xbda/0x1ea0 08:09:45 executing program 0: socket(0x28, 0x0, 0x729) [ 1423.023461][T31929] input: syz0 as /devices/virtual/input/input36 [ 1423.024580][ T29] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 08:09:45 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 08:09:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0xc0189436, &(0x7f0000000680)) 08:09:45 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f00000000c0)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x1000000000004e20, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r0, 0x0, 0xfffffffffffffd43, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) [ 1423.064600][ T29] ? _raw_spin_unlock_irqrestore+0x50/0x70 08:09:46 executing program 2: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) 08:09:46 executing program 4: clock_gettime(0x3, &(0x7f00000004c0)) [ 1423.117069][ T29] usb_set_configuration+0x101e/0x1900 [ 1423.149944][ T29] usb_generic_driver_probe+0xba/0x100 [ 1423.167322][ T29] usb_probe_device+0xd9/0x2c0 [ 1423.199259][ T29] ? usb_driver_release_interface+0x180/0x180 [ 1423.215089][ T29] really_probe+0x23e/0xb90 [ 1423.231028][ T29] __driver_probe_device+0x338/0x4d0 [ 1423.242248][ T29] driver_probe_device+0x4c/0x1a0 [ 1423.247220][ T28] audit: type=1804 audit(1654675786.087:597): pid=31942 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir109162605/syzkaller.5ME36M/2301/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 [ 1423.253055][ T29] __device_attach_driver+0x20b/0x2f0 [ 1423.316402][ T29] ? driver_allows_async_probing+0x170/0x170 [ 1423.322591][ T29] bus_for_each_drv+0x15f/0x1e0 [ 1423.330035][ T29] ? bus_for_each_dev+0x1d0/0x1d0 [ 1423.335195][ T29] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1423.341315][ T29] ? lockdep_hardirqs_on+0x79/0x100 [ 1423.346690][ T29] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1423.352663][ T29] __device_attach+0x1e4/0x530 [ 1423.358125][ T29] ? device_driver_attach+0x210/0x210 [ 1423.363630][ T29] ? kobject_uevent_env+0x2ac/0x1660 [ 1423.369226][ T29] bus_probe_device+0x1e4/0x290 [ 1423.374345][ T29] device_add+0xbda/0x1ea0 [ 1423.380867][ T29] ? lockdep_hardirqs_on+0x79/0x100 [ 1423.386350][ T29] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 1423.392714][ T29] ? add_device_randomness+0xb4/0xe0 [ 1423.398587][ T29] usb_new_device.cold+0x641/0x1091 [ 1423.403981][ T29] ? hub_disconnect+0x510/0x510 [ 1423.413085][ T29] ? rwlock_bug.part.0+0x90/0x90 [ 1423.420763][ T29] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1423.426316][ T29] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1423.431641][ T29] hub_event+0x25d5/0x4690 [ 1423.439059][ T29] ? hub_port_debounce+0x3c0/0x3c0 [ 1423.444553][ T29] ? lock_release+0x780/0x780 [ 1423.449472][ T29] ? lock_downgrade+0x6e0/0x6e0 [ 1423.454472][ T29] ? do_raw_spin_lock+0x120/0x2a0 [ 1423.459793][ T29] process_one_work+0x996/0x1610 [ 1423.464854][ T29] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1423.470461][ T29] ? rwlock_bug.part.0+0x90/0x90 [ 1423.475524][ T29] ? _raw_spin_lock_irq+0x41/0x50 [ 1423.486805][ T29] worker_thread+0x665/0x1080 [ 1423.491977][ T29] ? __kthread_parkme+0x15f/0x220 [ 1423.497294][ T29] ? process_one_work+0x1610/0x1610 [ 1423.502615][ T29] kthread+0x2e9/0x3a0 [ 1423.507149][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 1423.512909][ T29] ret_from_fork+0x1f/0x30 08:09:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300c0000000000011000000080211000001"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) sendfile(r5, r1, 0x0, 0x100000004) 08:09:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045567, &(0x7f0000000680)) 08:09:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) 08:09:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 08:09:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0xc020660b, 0x0) 08:09:46 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a00)='ns/pid_for_children\x00') [ 1423.517733][ T29] [ 1423.521223][ T29] [ 1423.521223][ T29] Showing all locks held in the system: [ 1423.529633][ T29] 2 locks held by kworker/u4:1/11: 08:09:46 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000580)={0x1}) 08:09:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB='4'], 0x34}, 0x7}, 0x0) 08:09:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0xc00c55ca, &(0x7f0000000680)={0xff01}) [ 1423.603521][ T29] #0: ffff8880b9b39fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2b/0x120 [ 1423.614858][T31954] input: syz0 as /devices/virtual/input/input38 08:09:46 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x6080) [ 1423.659142][T31956] input: syz0 as /devices/virtual/input/input39 [ 1423.666756][ T29] #1: ffff8880b9b277c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3e7/0x4e0 08:09:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x400c55cb, &(0x7f0000000680)) 08:09:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000540)={{}, 'syz1\x00'}) [ 1423.719675][ T29] 1 lock held by khungtaskd/29: [ 1423.730064][ T29] #0: ffffffff8bd83be0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1423.751089][ T29] 1 lock held by hwrng/755: [ 1423.760839][ T29] #0: ffffffff8c829c28 (reading_mutex){+.+.}-{3:3}, at: hwrng_fillfn+0x141/0x370 [ 1423.770941][ T28] audit: type=1804 audit(1654675786.617:598): pid=31966 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir109162605/syzkaller.5ME36M/2302/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 [ 1423.790687][ T29] 1 lock held by acpid/2963: [ 1423.817373][ T29] #0: ffffffff8bd8dee0 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f8/0x610 [ 1423.856727][ T29] 2 locks held by getty/3292: [ 1423.871087][ T29] #0: ffff88814a9f8098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1423.885793][ T29] #1: ffffc90001bf92e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xe50/0x13c0 [ 1423.897194][ T29] 3 locks held by kworker/u4:7/3724: [ 1423.902828][ T29] #0: ffff8880b9a39fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2b/0x120 [ 1423.914909][ T29] #1: ffffc90003cb7da8 ((work_completion)(&ei->i_rsv_conversion_work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 1423.928473][ T29] #2: ffff88814b00c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfb4/0x14a0 [ 1423.938813][ T29] 2 locks held by kworker/0:18/10120: [ 1423.944517][ T29] #0: ffff888011876538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 1423.955569][ T29] #1: ffffc900041dfda8 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 1423.967659][ T29] 6 locks held by kworker/1:38/20060: [ 1423.973396][ T29] #0: ffff8881457da538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 1423.984551][ T29] #1: ffffc9000454fda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 1423.996903][ T29] #2: ffff8881477c9190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4690 [ 1424.006276][ T29] #3: ffff88807572c190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x76/0x530 08:09:46 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) 08:09:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004f40)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x1600bd74}}], 0x18}}], 0x2, 0x0) [ 1424.025814][ T29] #4: ffff888081bc0118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x76/0x530 [ 1424.035272][ T29] #5: ffffffff8c829c28 (reading_mutex){+.+.}-{3:3}, at: add_early_randomness+0x1a/0x170 [ 1424.045819][ T29] 3 locks held by udevd/27282: [ 1424.050758][ T29] #0: ffff88801c1dc488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x189/0x6e0 [ 1424.061247][ T29] #1: ffff8880785873e8 (kn->active#56){++++}-{0:0}, at: kernfs_fop_read_iter+0x1ac/0x6e0 [ 1424.099782][ T29] #2: ffff88807572c190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x3c/0x2c0 [ 1424.139715][ T29] 2 locks held by syz-executor.2/31950: [ 1424.155048][ T29] #0: ffffffff8cea53e8 (input_mutex){+.+.}-{3:3}, at: __input_unregister_device+0x16d/0x470 [ 1424.166183][ T29] #1: ffffffff8bd8dee0 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d3/0x610 [ 1424.180569][ T29] 2 locks held by syz-executor.5/31956: [ 1424.186730][ T29] #0: ffff888026c11870 (&newdev->mutex){+.+.}-{3:3}, at: uinput_ioctl_handler.isra.0+0xa7/0x1dc0 [ 1424.200262][ T29] #1: ffffffff8cea53e8 (input_mutex){+.+.}-{3:3}, at: input_register_device.cold+0x34/0x303 [ 1424.213006][ T29] 1 lock held by syz-executor.5/31963: [ 1424.218947][ T29] #0: ffff888026c11870 (&newdev->mutex){+.+.}-{3:3}, at: uinput_ioctl_handler.isra.0+0xa7/0x1dc0 [ 1424.230029][ T29] [ 1424.232508][ T29] ============================================= [ 1424.232508][ T29] [ 1424.286837][ T29] NMI backtrace for cpu 1 [ 1424.291224][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 5.19.0-rc1-syzkaller #0 [ 1424.299410][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1424.309494][ T29] Call Trace: [ 1424.312793][ T29] [ 1424.315834][ T29] dump_stack_lvl+0xcd/0x134 [ 1424.320533][ T29] nmi_cpu_backtrace.cold+0x47/0x144 [ 1424.325859][ T29] ? lapic_can_unplug_cpu+0x80/0x80 [ 1424.331155][ T29] nmi_trigger_cpumask_backtrace+0x1e6/0x230 08:09:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) 08:09:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x2, &(0x7f0000000680)) 08:09:47 executing program 4: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000080), 0x48) 08:09:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x5450, 0x0) 08:09:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="13"], 0x34}}, 0x0) 08:09:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1424.337180][ T29] watchdog+0xc22/0xf90 [ 1424.341399][ T29] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 1424.347442][ T29] kthread+0x2e9/0x3a0 [ 1424.351544][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 1424.357208][ T29] ret_from_fork+0x1f/0x30 [ 1424.361649][ T29] [ 1424.364747][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1424.370033][ C0] NMI backtrace for cpu 0 [ 1424.370045][ C0] CPU: 0 PID: 8 Comm: kworker/u4:0 Not tainted 5.19.0-rc1-syzkaller #0 08:09:47 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/user\x00') 08:09:47 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect(r0, &(0x7f0000000040)=@caif=@dbg, 0x80) 08:09:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x34}, 0x1, 0x0, 0xf0}, 0x0) 08:09:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000500)={0x0, {0x0, 0x0, 0x7}}) 08:09:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) [ 1424.370066][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 08:09:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x5452, 0x0) 08:09:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1424.370078][ C0] Workqueue: bat_events batadv_nc_worker 08:09:47 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x86101, 0x0) [ 1424.370188][ C0] RIP: 0010:lock_release+0x202/0x780 08:09:47 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[], 0x28}}, 0x0) 08:09:47 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1424.370215][ C0] Code: ed 0f 84 ff 02 00 00 48 8d 4c 24 50 44 89 ea 4c 89 e6 4c 89 ff e8 ce 0c ff ff 48 85 c0 48 89 c3 0f 84 c3 03 00 00 48 8d 78 24 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 08:09:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef019f42bb7400dff4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f0000011500)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000180)={[{@jqfmt_vfsv1}]}) 08:09:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f00000004c0)='syz1\x00') ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000500)='syz0\x00') 08:09:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x300}, 0x0) [ 1424.370235][ C0] RSP: 0018:ffffc900002efbc0 EFLAGS: 00000082 [ 1424.370250][ C0] RAX: ffff888012198cb0 RBX: ffff888012198cb0 RCX: ffffc900002efc10 08:09:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 08:09:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f00000004c0)='syz1\x00') ioctl$UI_SET_PHYS(r0, 0x5502, 0x0) 08:09:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40049409, 0x0) [ 1424.370264][ C0] RDX: 0000000000000004 RSI: ffffffff8bd83be0 RDI: ffff888012198cd4 [ 1424.370277][ C0] RBP: 1ffff9200005df7a R08: 0000000000000000 R09: 0000000000000000 [ 1424.370289][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bd83be0 [ 1424.370289][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bd83be0 [ 1424.370302][ C0] R13: 0000000000000003 R14: ffff888012198c58 R15: ffff888012198200 [ 1424.370315][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 1424.370334][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1424.370348][ C0] CR2: 000000c00fe3f500 CR3: 0000000073ed9000 CR4: 00000000003506f0 [ 1424.370361][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1424.370373][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1424.370385][ C0] Call Trace: [ 1424.370391][ C0] [ 1424.370398][ C0] ? batadv_nc_worker+0x849/0xfa0 [ 1424.370421][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 1424.370445][ C0] batadv_nc_worker+0x86b/0xfa0 [ 1424.370470][ C0] process_one_work+0x996/0x1610 [ 1424.370492][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1424.370513][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1424.370530][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 1424.370554][ C0] worker_thread+0x665/0x1080 [ 1424.370575][ C0] ? process_one_work+0x1610/0x1610 [ 1424.370594][ C0] kthread+0x2e9/0x3a0 [ 1424.370611][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 1424.370630][ C0] ret_from_fork+0x1f/0x30 [ 1424.370654][ C0] [ 1424.410189][T31987] input: syz0 as /devices/virtual/input/input43 [ 1424.471779][T31988] input: syz0 as /devices/virtual/input/input44 [ 1424.572454][T31994] input: syz0 as /devices/virtual/input/input45 [ 1424.749844][T32004] input: syz0 as /devices/virtual/input/input47 [ 1424.791992][T32011] loop5: detected capacity change from 0 to 512 [ 1424.855545][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1424.855563][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 5.19.0-rc1-syzkaller #0 [ 1424.855590][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1424.855606][ T29] Call Trace: [ 1424.855622][ T29] [ 1424.855631][ T29] dump_stack_lvl+0xcd/0x134 [ 1424.855666][ T29] panic+0x2d7/0x636 [ 1424.855692][ T29] ? panic_print_sys_info.part.0+0x10b/0x10b [ 1424.855720][ T29] ? lapic_can_unplug_cpu+0x80/0x80 [ 1424.855750][ T29] ? preempt_schedule_thunk+0x16/0x18 [ 1424.855781][ T29] ? watchdog.cold+0x5/0x143 [ 1424.855835][ T29] watchdog.cold+0x16/0x143 [ 1424.855865][ T29] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 1424.855896][ T29] kthread+0x2e9/0x3a0 [ 1424.855919][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 1424.855945][ T29] ret_from_fork+0x1f/0x30 [ 1424.855974][ T29] [ 1424.856376][ T29] Kernel Offset: disabled