[ OK ] Started Regular background program processing daemon. [ OK ] Started Permit User Sessions. [ OK ] Found device /dev/ttyS0. [ OK ] Started System Logging Service. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.169' (ECDSA) to the list of known hosts. 2020/06/29 20:27:36 fuzzer started 2020/06/29 20:27:37 dialing manager at 10.128.0.26:33155 2020/06/29 20:27:37 syscalls: 3149 2020/06/29 20:27:37 code coverage: enabled 2020/06/29 20:27:37 comparison tracing: enabled 2020/06/29 20:27:37 extra coverage: enabled 2020/06/29 20:27:37 setuid sandbox: enabled 2020/06/29 20:27:37 namespace sandbox: enabled 2020/06/29 20:27:37 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/29 20:27:37 fault injection: enabled 2020/06/29 20:27:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/29 20:27:37 net packet injection: enabled 2020/06/29 20:27:37 net device setup: enabled 2020/06/29 20:27:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/29 20:27:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/29 20:27:37 USB emulation: enabled 20:29:39 executing program 0: bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b0304000000004555a763c15ceda0bb3576ed3ae7a290ab0e74467713328b5e4577124d1a2e21da765cd1ce2356a8f85646bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b3e5903e10913072c8254f745b7d46cedd461a7ddb592a67f706eb14c1d3d1a204fe2e9c50d7920f69e068d2c7faba408ce7a3b0c6c699890e19745ba9a37cfdd7ff58b659bbf65c6a2b2e441a0e0c44a3d9abeb7d90f000000000e077d0d67096d"], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000340)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getgroups(0x1, &(0x7f0000000040)=[0x0]) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syzkaller login: [ 166.531601][ T6817] IPVS: ftp: loaded support on port[0] = 21 [ 166.657771][ T6817] chnl_net:caif_netlink_parms(): no params data found 20:29:39 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) [ 166.719829][ T6817] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.750926][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.759183][ T6817] device bridge_slave_0 entered promiscuous mode [ 166.783668][ T6817] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.790911][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.798809][ T6817] device bridge_slave_1 entered promiscuous mode [ 166.853419][ T6817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.884151][ T6817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.894601][ T6948] IPVS: ftp: loaded support on port[0] = 21 [ 166.938659][ T6817] team0: Port device team_slave_0 added [ 166.964357][ T6817] team0: Port device team_slave_1 added 20:29:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x800000080004105) [ 167.015459][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.027231][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.057516][ T6817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.085363][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.094051][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.123823][ T6817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.245021][ T6817] device hsr_slave_0 entered promiscuous mode [ 167.271633][ T6817] device hsr_slave_1 entered promiscuous mode 20:29:40 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 167.481100][ T6948] chnl_net:caif_netlink_parms(): no params data found [ 167.487078][ T7080] IPVS: ftp: loaded support on port[0] = 21 [ 167.497516][ T7076] IPVS: ftp: loaded support on port[0] = 21 20:29:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2a0, 0x0, 0x0, 0x150, 0x150, 0x150, 0x208, 0x208, 0x208, 0x208, 0x208, 0x3, 0x0, {[{{@ip={@multicast1, @loopback, 0x0, 0x0, 'veth1_vlan\x00', 'vxcan1\x00'}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'gretap0\x00', {0x60, 0x0, 0x0, 0x0, 0x0, 0x6, 0x76}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) [ 167.669538][ T6948] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.679523][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.689071][ T6948] device bridge_slave_0 entered promiscuous mode [ 167.742980][ T6948] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.750278][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.783090][ T6948] device bridge_slave_1 entered promiscuous mode [ 167.956761][ T6948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 20:29:41 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffff00fffff676049167a686dd60a4f00800403a00033c0000000000000000000000000000ff02000000000000000000000000000102009000fe8000000000000000000000000000bbfe8000000000000000000000000000bb2f0000"], 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x91, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x6}, 0x44a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = semget$private(0x0, 0x207, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000000000000000060bc7d94004c2c00fe8000000000000500000000000000aaff0200000000000000000000000000012f0000000000000000000800f52ba73d1b6c5b2d81636feb0038153ecc70c0edef5382646f91d50086dd080088be00000004100000000100000000000000080022eb00000000200000000200000000000000131afea658fc2e374d687189c1ece7592db2b1ac1a9f6d9582b45e2a430ac9614d8e86e1542583163911b53a710e831e5929fd95a1f71d43e72fe2fe26b4a83984c36d8bf44d8a0a618aaa4c234e2c87f3394206289eff50b0d65648607b9e20cab8273777cea75f848b3e05bd716db82ff08d29162623789c60d0480e37182ed57f5d024a7531e83df7f07d3c0245d66ff203922fe98f56fbd96a5d4ffb21d03a9c72899048bb19e50fe0f4f8617e98bc2282a0ec9aa19c72c315eea31925bf279d934d153c3d29a3b5d23465136d2c2732c97bfa780472ae03c900113fbcb27cdd5dc368eb37dd1cc4a22ca34e7a056156e805713cd2bcb11a9247c9aba9a88733ff30969deaa653872159a0d9bdeb00ffc6fe710000000000000000b7c54b47ac65a83799e9f70ba227187ea38287ee7cf682528df57063e5b36f5b24bb1b1893ddeaa215f1f4406735f67878499b"], 0x7e) [ 168.022215][ T7076] chnl_net:caif_netlink_parms(): no params data found [ 168.045163][ T6817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 168.115056][ T6948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.155974][ T7080] chnl_net:caif_netlink_parms(): no params data found [ 168.177043][ T6817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 168.223225][ T6817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.277648][ T6817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.373585][ T6948] team0: Port device team_slave_0 added [ 168.398330][ T6948] team0: Port device team_slave_1 added [ 168.416310][ T7080] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.426610][ T7334] IPVS: ftp: loaded support on port[0] = 21 [ 168.428557][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.442581][ T7080] device bridge_slave_0 entered promiscuous mode [ 168.444494][ T7374] IPVS: ftp: loaded support on port[0] = 21 [ 168.452907][ T7080] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.462728][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.470491][ T7080] device bridge_slave_1 entered promiscuous mode [ 168.494563][ T6948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.501910][ T6948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.528686][ T6948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.543299][ T6948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.551683][ T6948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.578656][ T6948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.606262][ T7080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.619337][ T7080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.683387][ T6948] device hsr_slave_0 entered promiscuous mode [ 168.731724][ T6948] device hsr_slave_1 entered promiscuous mode [ 168.771320][ T6948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.779093][ T6948] Cannot create hsr debugfs directory [ 168.794621][ T7080] team0: Port device team_slave_0 added [ 168.832579][ T7080] team0: Port device team_slave_1 added [ 168.843351][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.850420][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.859057][ T7076] device bridge_slave_0 entered promiscuous mode [ 168.868040][ T7076] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.875208][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.883301][ T7076] device bridge_slave_1 entered promiscuous mode [ 168.950858][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.958707][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.985595][ T7080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.998682][ T7076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.045715][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.053132][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.080384][ T7080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.103667][ T7076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.246009][ T7080] device hsr_slave_0 entered promiscuous mode [ 169.311405][ T7080] device hsr_slave_1 entered promiscuous mode [ 169.361172][ T7080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.368800][ T7080] Cannot create hsr debugfs directory [ 169.383969][ T7076] team0: Port device team_slave_0 added [ 169.424398][ T7076] team0: Port device team_slave_1 added [ 169.493194][ T7374] chnl_net:caif_netlink_parms(): no params data found [ 169.546697][ T6817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.570345][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.578038][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.607553][ T7076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.634886][ T7334] chnl_net:caif_netlink_parms(): no params data found [ 169.655517][ T6948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.716491][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.723609][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.750924][ T7076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.798562][ T6948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.869613][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.879528][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.934351][ T7076] device hsr_slave_0 entered promiscuous mode [ 169.971591][ T7076] device hsr_slave_1 entered promiscuous mode [ 170.041292][ T7076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.048876][ T7076] Cannot create hsr debugfs directory [ 170.056086][ T6948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 170.114427][ T6817] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.148158][ T6948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.197967][ T7374] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.206337][ T7374] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.216699][ T7374] device bridge_slave_0 entered promiscuous mode [ 170.227775][ T7374] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.236438][ T7374] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.245141][ T7374] device bridge_slave_1 entered promiscuous mode [ 170.278572][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.294516][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.303213][ T2485] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.310730][ T2485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.320549][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.329839][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.338661][ T2485] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.345794][ T2485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.358829][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.367884][ T7080] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.418283][ T7080] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.474217][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.481522][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.489917][ T7334] device bridge_slave_0 entered promiscuous mode [ 170.507085][ T7374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.518510][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.541647][ T7080] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 170.608711][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.616664][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.624904][ T7334] device bridge_slave_1 entered promiscuous mode [ 170.639369][ T7374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.657411][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.667417][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.678262][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.688996][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.698294][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.707602][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.716470][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.727328][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.735678][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.744430][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.759205][ T7080] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 170.822068][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.853576][ T7374] team0: Port device team_slave_0 added [ 170.861385][ T7334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.874936][ T7334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.904939][ T7374] team0: Port device team_slave_1 added [ 170.968419][ T7374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.976815][ T7374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.006097][ T7374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.020349][ T7334] team0: Port device team_slave_0 added [ 171.033407][ T7334] team0: Port device team_slave_1 added [ 171.047182][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.056771][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.069239][ T7374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.077655][ T7374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.105603][ T7374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.129803][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.137804][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.167352][ T7334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.195257][ T6817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.226322][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.235184][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.263903][ T7334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.333711][ T7374] device hsr_slave_0 entered promiscuous mode [ 171.381798][ T7374] device hsr_slave_1 entered promiscuous mode [ 171.421372][ T7374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.429050][ T7374] Cannot create hsr debugfs directory [ 171.504235][ T7334] device hsr_slave_0 entered promiscuous mode [ 171.542003][ T7334] device hsr_slave_1 entered promiscuous mode [ 171.581370][ T7334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.589052][ T7334] Cannot create hsr debugfs directory [ 171.598686][ T6948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.648542][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.658414][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.691058][ T6948] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.700376][ T7076] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 171.801689][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.809875][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.834608][ T7076] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 171.865569][ T7076] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 171.914531][ T7076] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.982500][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.991073][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.005685][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.016195][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.028178][ T2559] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.035351][ T2559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.054821][ T7080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.065067][ T6817] device veth0_vlan entered promiscuous mode [ 172.080533][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.092924][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.101061][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.114750][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.124071][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.132972][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.140166][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.149499][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.165434][ T6817] device veth1_vlan entered promiscuous mode [ 172.176941][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.187581][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.199444][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.209173][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.233752][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.278168][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.288858][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.300172][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.309949][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.319402][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.327280][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.341680][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.350043][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.376828][ T7080] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.398183][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.419052][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.429334][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.446570][ T6817] device veth0_macvtap entered promiscuous mode [ 172.467068][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.478783][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.489937][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.499556][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.508186][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.524021][ T6817] device veth1_macvtap entered promiscuous mode [ 172.557315][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.565901][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.574468][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.584341][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.593732][ T2485] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.601137][ T2485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.617826][ T6948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.654749][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.664416][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.672556][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.693980][ T7374] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.735781][ T7374] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.795466][ T7374] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.871949][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.880695][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.899731][ T6948] device veth0_vlan entered promiscuous mode [ 172.925987][ T7374] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 172.958370][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.977917][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.990305][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.009320][ T6948] device veth1_vlan entered promiscuous mode [ 173.034257][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.044252][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.053625][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.063428][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.078063][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.089136][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.097326][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.106574][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.134617][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.174270][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 173.187817][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.197480][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.210237][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.218769][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.229406][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.250674][ T7334] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.315585][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.324462][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.344529][ T7080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.365308][ T7076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.375844][ T7334] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.415529][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.424190][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.492141][ T7334] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.544344][ T7334] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.593877][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.603164][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.615638][ T6948] device veth0_macvtap entered promiscuous mode [ 173.674123][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.684896][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.695198][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.708676][ T7076] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.730236][ T6948] device veth1_macvtap entered promiscuous mode [ 173.797750][ T7080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.821517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.829880][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.844191][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.859080][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.870622][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.880577][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.887755][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state 20:29:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x48280) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x1}, 0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 173.937996][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 173.949079][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.980373][ T6948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.991754][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.001831][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.012131][ T8076] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 174.029060][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.038136][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.045291][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.054909][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.070484][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.110084][ T6948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 174.122438][ T6948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.134368][ T6948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.161559][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.179555][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 20:29:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r4, @ANYBLOB="004e7c7c5b8a00001c0012000c000100626f6e64000000060c000200080006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r7, @ANYRES32=r0], 0x40}}, 0x0) [ 174.205297][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.223171][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.242565][ T7374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.294907][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.318092][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.326743][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.335659][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.344571][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.354719][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.363369][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.371952][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.380886][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.410356][ T7334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.430478][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.443505][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.455897][ T8094] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 174.477348][ T7080] device veth0_vlan entered promiscuous mode [ 174.508355][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.522251][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.533875][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.542873][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.554294][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.699033][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.721337][ C1] hrtimer: interrupt took 69484 ns [ 174.722872][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.753277][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.771804][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.784147][ T7374] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.813627][ T7080] device veth1_vlan entered promiscuous mode [ 174.834994][ T7334] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.860387][ T7076] 8021q: adding VLAN 0 to HW filter on device batadv0 20:29:48 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) [ 174.902177][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.910375][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 174.936894][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.959155][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.975056][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.014831][ T2488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.030104][ T2488] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.037855][ T2488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.077831][ T8091] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 175.122686][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.137296][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.169652][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.178429][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.185600][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.193652][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.202760][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 20:29:48 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) [ 175.214146][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.222072][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.232680][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.248145][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.269634][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.280853][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.296580][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.303758][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state 20:29:48 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) [ 175.319308][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 20:29:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$vsock(0xffffff9c, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x0) accept4$netrom(r1, &(0x7f0000000000)={{0x3, @netrom}, [@rose, @default, @default, @netrom, @bcast, @netrom, @remote, @null]}, &(0x7f0000000080)=0x48, 0x800) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xc63b9e35) [ 175.424717][ T7080] device veth0_macvtap entered promiscuous mode [ 175.462525][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.470799][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 20:29:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 175.543134][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.601125][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.650497][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 20:29:48 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r5, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000040)={'wg1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x40c, r5, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x3f8, 0x8, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1d, @ipv4={[], [], @multicast1}, 0x7fff}}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @empty, 0x200}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "68b28c06d7303ddbe5d3562c79273f52c18a6d87acf730dc230dd387db013233"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010101}}]}, {0x2c0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x270, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x3b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x22}, 0x227}}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x40c}}, 0x20004805) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 175.715432][ T7080] device veth1_macvtap entered promiscuous mode [ 175.749157][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.788534][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.813741][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.837289][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.868275][ T7076] device veth0_vlan entered promiscuous mode [ 175.903583][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.915299][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.930036][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.939959][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.949486][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.959457][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.975278][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.000043][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.022434][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.035437][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.067568][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 176.082807][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.095572][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 176.107923][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.128526][ T7080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.140135][ T7076] device veth1_vlan entered promiscuous mode [ 176.159533][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.169861][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.181166][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.190808][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.200774][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.210350][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.219345][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.232538][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.241155][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.257721][ T7334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.271020][ T7334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.284350][ T7374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.313129][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 176.337928][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.360247][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 176.371005][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.384765][ T7080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.401869][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.410151][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.420122][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.429146][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.440257][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.449210][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.458159][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.564314][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.591089][ T7374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.684329][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.698033][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.705960][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.713916][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.729134][ T7334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.741845][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.758745][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.819010][ T7076] device veth0_macvtap entered promiscuous mode [ 176.850761][ T7076] device veth1_macvtap entered promiscuous mode [ 176.947682][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 176.978780][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.995358][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.006467][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.016996][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.028231][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.043249][ T7076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.050658][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.060164][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.069288][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.080032][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.089224][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.099343][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.136917][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.147601][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.162614][ T7374] device veth0_vlan entered promiscuous mode [ 177.178939][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.191325][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.202453][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.213826][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.224185][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.235383][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.248698][ T7076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.264117][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.274557][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.285294][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.299314][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.310473][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.323584][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.334645][ T7334] device veth0_vlan entered promiscuous mode [ 177.350651][ T7374] device veth1_vlan entered promiscuous mode [ 177.368016][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.377300][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.389536][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.404299][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.414346][ T2475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.431127][ T7334] device veth1_vlan entered promiscuous mode [ 177.555688][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.564263][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.574597][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.582810][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.591216][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.600446][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.610246][ T2485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.620792][ T7374] device veth0_macvtap entered promiscuous mode [ 177.730169][ T7374] device veth1_macvtap entered promiscuous mode [ 177.755189][ T7334] device veth0_macvtap entered promiscuous mode [ 177.802988][ T7334] device veth1_macvtap entered promiscuous mode [ 177.832714][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.859072][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.859101][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.859106][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.859116][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.859121][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.859135][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.859140][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.860912][ T7374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.862287][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.862294][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.862302][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.862307][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.862314][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.862327][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.862335][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.862340][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.862348][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.862354][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.863813][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.882281][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.079107][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.079580][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.080060][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.101178][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.101187][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.101195][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.101199][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.101207][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.101212][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.101219][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.101224][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.106247][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.108253][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.248151][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.248175][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.248181][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.248193][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.248197][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.248212][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.248216][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.248233][ T7374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.248237][ T7374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.250099][ T7374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.275137][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.275783][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.276305][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.276838][ T2476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.484356][ T8162] xt_hashlimit: overflow, rate too high: 0 20:29:51 executing program 3: sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@canfd={{}, 0x0, 0x1, 0x0, 0x0, "c52e2aebc19132ee27e803459588c3f366f81f3532dc3465dcefdb53f483a64c9302703f9b2e5e12b86c8a1104b94a2661f623ebd3645d5700511b0ece359f7c"}, 0x48}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x48280) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xe06) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x2142, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000014001}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r6, 0x48280) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='9p\x00', 0x4000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@msize={'msize', 0x3d, 0x128}}, {@cache_mmap='cache=mmap'}, {@nodevmap='nodevmap'}, {@version_u='version=9p2000.u'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '(-\xb1+'}}]}}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x3d32c784) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 20:29:51 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a2, 0x0) 20:29:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r1, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000380)={0x0, 0x0}) move_pages(r6, 0x9, &(0x7f00000003c0)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000440)=[0x4, 0xba, 0x7fffffff, 0x4, 0x81, 0x3], &(0x7f00000004c0)=[0x0, 0x0], 0x2) ftruncate(r5, 0x48280) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0xa6, 0x7f, 0x1c, 0xa8, 0x0, 0x6456, 0x2, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000080), 0xa}, 0x40180, 0xff, 0x0, 0x4, 0x60a678ae, 0x1ff, 0x3}, 0x0, 0x9, r5, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r7 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000340)=0x9) ftruncate(r7, 0x48280) ioctl$HIDIOCGFLAG(r7, 0x8004480e, &(0x7f0000000000)) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendfile(r4, r3, 0x0, 0xedc0) 20:29:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) sched_rr_get_interval(r3, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x40401, 0x0) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) 20:29:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite\x00') write$binfmt_elf64(r0, 0x0, 0x6df) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x48280) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "6c8cd230e9063f0b", "a0c10868c114eaedb8e01b37543319e4b0d8be16c3627be4f9dfc4131e9409a1", "bca5377e", "2a408cd1e9869890"}, 0x38) 20:29:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x28000000}}]}, 0x20}}, 0x20000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r4, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@local, @in=@private=0xa010100, 0x4e22, 0x2, 0x4e21, 0x0, 0xa, 0x20, 0xa0, 0x62}, {0x7, 0x7ff, 0x3, 0x3, 0x52, 0x7, 0x7, 0x4}, {0x8, 0xec62, 0x1, 0x4}, 0xffff, 0x6e6bb7, 0x2, 0x1, 0x1, 0x2}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d4, 0x2a}, 0x2, @in6=@ipv4={[], [], @broadcast}, 0x3500, 0x7, 0x73f8515cc4636597, 0x0, 0x6, 0x7f, 0x30c8}}, 0xe8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r7, 0x48280) setsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f00000000c0), 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cfe8b00", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f"], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff83"], 0x4}}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) 20:29:52 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a2, 0x0) 20:29:52 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r5, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000400)={0x2, @pix={0x0, 0x0, 0x47425247}}) 20:29:52 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a2, 0x0) 20:29:52 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x4000000, 0x105182) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @mcast1, 0x92f3}}, 0x24) sendfile(r0, r0, 0x0, 0x24002e00) 20:29:52 executing program 4: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000100001000900"/20, @ANYRES32=r4, @ANYBLOB="11220000000000001c001a8018000a8014000700fe88000000000000000000000000000108002800c793b4"], 0x74}}, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000100)=0x4) ioctl(r0, 0x8b32, &(0x7f0000000040)) [ 179.441388][ T8231] vim2m vim2m.0: Fourcc format (0x47425247) invalid. 20:29:52 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) [ 179.488649][ T8233] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 179.689422][ T8244] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 179.898066][ T8217] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2295854297 (73467337504 ns) > initial count (46352845440 ns). Using initial count to start timer. [ 179.930775][ T8217] kvm [8213]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf [ 179.992492][ T8249] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. 20:29:53 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) open(0x0, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x48, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) symlinkat(&(0x7f0000000100)='./bus\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') fdatasync(r2) shmctl$IPC_SET(0x0, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x100000, r2}) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 20:29:53 executing program 0: clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x4, 0x0, 0x0, 0xc}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x2e, 0x2e]}}, &(0x7f0000000200)=""/250, 0x2c, 0xfa, 0x8}, 0x20) 20:29:53 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) [ 180.087387][ T29] audit: type=1804 audit(1593462593.149:2): pid=8261 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir786646777/syzkaller.cBwg1C/2/bus" dev="sda1" ino=15774 res=1 [ 180.101940][ T8262] BPF:[1] FUNC a.. [ 180.124998][ T8265] BPF:[1] FUNC a.. [ 180.138702][ T8265] BPF:type_id=0 [ 180.152997][ T8265] BPF: [ 180.166954][ T8265] BPF:Invalid name [ 180.179527][ T8262] BPF:type_id=0 [ 180.183054][ T29] audit: type=1804 audit(1593462593.239:3): pid=8261 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir786646777/syzkaller.cBwg1C/2/bus" dev="sda1" ino=15774 res=1 [ 180.191100][ T8265] BPF: [ 180.191100][ T8265] [ 180.248062][ T29] audit: type=1804 audit(1593462593.309:4): pid=8261 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir786646777/syzkaller.cBwg1C/2/bus" dev="sda1" ino=15774 res=1 [ 180.252193][ T8262] BPF: [ 180.275283][ T8262] BPF:Invalid name [ 180.282220][ T8262] BPF: [ 180.282220][ T8262] [ 180.344804][ T29] audit: type=1804 audit(1593462593.359:5): pid=8261 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir786646777/syzkaller.cBwg1C/2/bus" dev="sda1" ino=15774 res=1 [ 180.466709][ T8217] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2295854297 (73467337504 ns) > initial count (46352845440 ns). Using initial count to start timer. 20:29:53 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x40000000000008, 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getlink={0x70, 0x12, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_CARRIER={0x5}, @IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x4a956}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x68aaa}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e1c}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1009}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x70}}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x400001, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r1 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x13, 0x113000) r2 = accept$netrom(r0, &(0x7f0000000240)={{0x3, @bcast}, [@default, @rose, @null, @null, @default, @rose, @remote, @rose]}, &(0x7f00000001c0)=0x48) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000380)={0xfffffff, 0x4, 0x80000000, r2, 0x0, &(0x7f0000000340)={0x990a5e, 0x0, [], @value=0x5}}) 20:29:53 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="72657369887b872100100000911ef75f0000746f2c00"]) 20:29:53 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:29:53 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000880)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000000b80)=""/196, 0xc4}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0xac8}, {&(0x7f0000000140)=""/85, 0x97d}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2e0}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x250}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r2, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000002100010400000000ec000000000000005bb394fc15b1ed5aa7904a644cda55f265ce74139f40ece84e09906435da40d414fc357944732e6f10", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r10}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) 20:29:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x101}, 0x14}}, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x48280) recvfrom$l2tp(r1, &(0x7f0000000000)=""/230, 0xe6, 0x40020000, &(0x7f0000000100)={0x2, 0x0, @initdev}, 0x10) 20:29:53 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000000)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000020601080000000000000000200000000c000300686173683a69700005000400000000000900020073797a31000000000500010006000000050005000a0000000c00078008001240fffffffb"], 0x50}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 20:29:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000001540)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x3e, 0x0, "d06bdda952daf03c08a4bcd60a6445964f031512956da90ef6e14572a6fd7becc35f971234e4464e686bd9fbb43dde35902645b25d7051dbc40630b90721d0d4d91afc9243afe5540cb07fc6f1a432fa"}, 0xd8) bind$inet(r3, &(0x7f0000738ff0)={0x2, 0x4e21, @empty}, 0x35) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @timestamp, @sack_perm, @mss, @sack_perm, @mss, @timestamp, @window], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x1, 0x100001}, 0x14) sendfile(r3, r0, 0x0, 0xedbe) 20:29:53 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x1a2, 0x0) [ 180.686623][ T8290] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "resiˆ{‡!" 20:29:53 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) write$UHID_CREATE2(r0, &(0x7f0000000540)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x90, 0xe34, 0x100, 0x3, 0x80000, 0x401, "1b34318f5c25db38e3ae2abfd2e2140048a5c9c8c8f69e77284ee78f887651cd2b0248baa3ed53c09d3b3312e884d10390b3595a53dd546a655c59afa3870471001b6a251af91d32c1fe522343567d3de103781a54d6572b39d1fb007926d9105c19878bc0f95d1b647b5fcaae4c9221d3c7ff4182c3d186f7988070a5ecc9570196f39f87634556b242dffa3e2f531b"}}, 0x1a8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x30}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r1, 0x0, r3, 0x0, 0x400000, 0x0) 20:29:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x101}, 0x14}}, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x48280) recvfrom$l2tp(r1, &(0x7f0000000000)=""/230, 0xe6, 0x40020000, &(0x7f0000000100)={0x2, 0x0, @initdev}, 0x10) 20:29:54 executing program 4: r0 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) getrandom(&(0x7f0000000240)=""/179, 0xb3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x48280) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000340)={0x9, 0xffffb020, 0x1, 'queue0\x00', 0x33268cfa}) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r3, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0xfffffff, 0xfffffff8, 0x7, r2, 0x0, &(0x7f0000000180)={0x990903, 0x1, [], @p_u16=&(0x7f0000000080)=0x7ff}}) setsockopt$inet6_tcp_int(r4, 0x6, 0x11, &(0x7f0000000300)=0xffffffe1, 0x4) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='[d::],0::6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f00000004c0)={0x7, "1de2ed86c845223a6909ec0cce3351b73bf0d751bda1ff53c5ca5333fac50ca1", 0x4, 0x2, 0xfff, 0x6, 0x8, 0x2, 0x7, 0x4a1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000000)=0x78) fchdir(0xffffffffffffffff) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000400)={0x100, 0x20000, 0x50, 0x177bc8fe, 0x9, 0x7}) 20:29:54 executing program 0: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x14002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x30021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfc}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000802, 0x0) write(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xfe1e) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff00000000009e941500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) [ 180.945091][ T8290] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "resiˆ{‡!" 20:29:54 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x1a2, 0x0) 20:29:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x101}, 0x14}}, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x48280) recvfrom$l2tp(r1, &(0x7f0000000000)=""/230, 0xe6, 0x40020000, &(0x7f0000000100)={0x2, 0x0, @initdev}, 0x10) [ 181.144946][ T29] audit: type=1804 audit(1593462594.209:6): pid=8330 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir461578643/syzkaller.p5ATw3/4/file0" dev="sda1" ino=15755 res=1 20:29:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x482, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc, 0x4d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0xaa45) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64018102}, 0x10) listen(r0, 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xb) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) recvmmsg(r1, &(0x7f0000004100), 0x316, 0x2, &(0x7f0000004a80)={0x77359400}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000002c0)=""/254) fchdir(r3) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2, 0x1}, 0x6) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x48280) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000280), 0x1) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r5, 0x48280) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000140)={{0x0, 0x1}, 'port1\x00', 0x60, 0x1001, 0x6, 0x1, 0x7b, 0x6f1, 0x4, 0x0, 0x2, 0x2}) 20:29:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000a00)=[@text32={0x20, &(0x7f0000000080)="b8090000000f23c00f21f835020003000f23f8664a4c040f00d0af0f01d1f30f0966ba2000b000eeb9630a0000b80e000000ba000000000f30360f01cbb90d0a00000f32e650", 0x46}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x680, 0x0) 20:29:54 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x1a2, 0x0) 20:29:54 executing program 2: sync() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = dup(r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 20:29:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r7}}, 0x20}}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74000033322bf898d45f9a3fe2672c0013000400272507000000", @ANYRES32=r7, @ANYBLOB="58a5519618c419cd140014007665746831000000000000000000000024000e0000000000000000000300000000000000018000000000000001004e08000000000a000100ffffffffffff000008001300", @ANYRES32=0x0, @ANYBLOB="08000f007f000040"], 0x74}}, 0x0) 20:29:54 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000180)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = accept4$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x100000) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file0', [], 0xa, "9ec5c3438b8ceba2d4c8b25a7e0d0f7fdcc78a89a459d5f257b1e0"}, 0x26) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000004d000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:29:54 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0xd, 0x0, 0x948200}}, 0x50) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x0, 0x0, 0x0, 0xa00}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600), 0x4}}], 0x3fffffffffffe66, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x12) umount2(&(0x7f0000000000)='./file0\x00', 0xb) socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r4, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x3}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x38, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x80000001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x5, 0x1, "8f"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xe, 0x1, "d273b34c6c8f98df6a40"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x10000}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000801}, 0x8c1) [ 181.862251][ T29] audit: type=1804 audit(1593462594.918:7): pid=8376 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir461578643/syzkaller.p5ATw3/4/file0" dev="sda1" ino=15755 res=1 [ 181.893891][ T8319] ceph: No mds server is up or the cluster is laggy [ 181.912223][ T8378] ceph: No mds server is up or the cluster is laggy 20:29:55 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:29:55 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2c, 0x0, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x2c}}, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x40080, 0x0) sendto$netrom(r3, &(0x7f0000000080)="46c534e8879757fa0e4127917f8d03791d26805ad1f0befe7d663864fc7207d549dae039159afb25d92b", 0x2a, 0x11, &(0x7f00000000c0)={{0x3, @bcast, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) 20:29:55 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:29:55 executing program 2: sync() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = dup(r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 20:29:55 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x74}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) socketpair(0x0, 0x80000, 0x81, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2bae}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe69}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}]}, 0x98}}, 0x41) 20:29:55 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x4000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c9]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @initdev}, &(0x7f0000000480)=0xc) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000440)={0x200002, 0x6}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttynull\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = openat2(r3, &(0x7f0000000340)='./file1\x00', &(0x7f00000002c0)={0x100, 0xb8, 0x1d}, 0x18) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000180)) times(&(0x7f0000000240)) 20:29:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r5, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[], 0x2c, 0x3) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r6, 0x48280) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f00000000c0)='/\x00', &(0x7f0000000140)='./file1\x00', r7) 20:29:55 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:29:55 executing program 3: r0 = socket$inet6(0xa, 0x8004808000080003, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) 20:29:55 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$pptp(0x18, 0x1, 0x2) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0x2}, 0x4) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000280)={0x7, @capture={0x0, 0x0, {0x3ff, 0xcf}, 0x3, 0x1}}) ftruncate(r3, 0x200005) sendfile(r2, r3, 0x0, 0x80001d00c0d0) 20:29:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="48000000140081d6212bbbe63e8e2a000a1100b9eb1b87811b59d072db3284576bee20a20f7b33d78fc0adbd7c493872f750371e0800562ae74703c48f6db82a02000000461eb886", 0x48}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r2, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) fallocate(r1, 0x14, 0x0, 0x1) 20:29:55 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x0, 0x5]}}]}}]}, 0x8c}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r6, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) readahead(r5, 0x7, 0x0) 20:29:55 executing program 3: close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r1, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) sync_file_range(r0, 0x7, 0x6, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x5, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000380), 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 20:29:55 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) [ 182.801039][ T29] audit: type=1800 audit(1593462595.858:8): pid=8451 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15754 res=0 20:29:55 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000632000/0x4000)=nil, 0x4000, 0x65) clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_send_signal(r2, 0x3, &(0x7f0000000080)={0x20, 0x5, 0x6d4}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x7fff, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000340)={0x0, 0x1, @raw_data=[0x75, 0x8, 0x3c31df28, 0xfff, 0x4, 0x7ff, 0x4, 0x8001, 0x101, 0x4000, 0x6, 0x3, 0x1400, 0x7, 0x3, 0x1]}) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x8, 0x2) r4 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x2, 0x2) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000280)) r5 = openat2(0xffffffffffffffff, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x101000, 0xc7, 0x18}, 0x18) bind$ax25(r5, &(0x7f0000001500)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) mlock2(&(0x7f0000632000/0x2000)=nil, 0x2000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fa9f7cc220a3d4332dbc01924cad7d6e579a3265168ae96dfa0a5b0df876cf722378595bf67d13f80cbb78ba601d7e2b11cacc78589a3c4f28463bb0f1f9dfaf0fab114fc2d24812573c714ad41868b801c371d7c18a114b34eceba7c705d01c0c2eb51d528c0a0c9296f8306bc50a9857d344fcfc4002808aa2ba008d35d2c3d76d01edec2b227b87c2af12aea7317f9dec27b242e041f920b470152b6ba51df4a86981ce09f5f74e18bf6c9bae7d8b77becd7af0761d4a767da6279f6a5307271e", @ANYRES16=r7, @ANYBLOB="010b0000000000000000000000001400020077673100"/34], 0x28}}, 0x0) fchmod(r6, 0x10) 20:29:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209240", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 20:29:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r1, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000340)='./file0\x00', 0x14200, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x3, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x440) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r4, 0x3ce19c509e025f0f, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r4, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) syz_read_part_table(0x0, 0x2, &(0x7f0000002540)=[{0x0, 0x0, 0xcf2b}, {&(0x7f0000000000)="5d187c97e3eba242f83f24a6f26c8ef001d1511834c3c7d1aff5694c8929bdb8fb1120100554d7fa32d9aaef870960405ace5fb9d87808c5dac53a771424bc2eafd65363abbbb6192fc162f766e0b8234565f628829725c97df059d4af4bb8a07f2d15ae3c221e6243da8dff069b674a0be215f7c219c79fb82787f31e32acf2ab7b8757e4f10f72a726a45d2b0c263bdb3457c00ddc965bc6d59bbc92182383908fe1a9ace1a4fe42cdb5ef9cb253d2a7fc00298a2bb04660dbf2cf8fd35237f2cba4b204b619bb44a216513bc9410c26c4c6a8bbae6df87a09d0ada8ba4239b94d2971e3f9064ae453fedcbb4e583a2f626220c91aae754b2f36d2f36ab75a44a9b4fcdc1397f9f1dd124e01745a230f4475bf7b03c1359cf2a6b27944cb946f8bff48a0d267acd8aa4b4f9c64a19373c4a5eb82430eeeae6eef94537151793efb0d340e674b22b006edff6862c4c2696584c112e731966adce770f322f055c3877fe9e45e5df5eb7bf5c572b1a940cf72657d5a3e3461ef164ded4f1545a19fc09216bdaea7e5920c4e9d99fd64618240e83c0e8c345bf417d5bdae601f15561807e6f3c549ccdb75a9f0321e36fba6254697ca6c1bc1ab065e21e240f160ec7f4cdf9a39a4b08940a152ad30d2ae338d85ec8836cbe83d4b6fc9", 0x1dc, 0x6}]) 20:29:56 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) creat(&(0x7f0000000000)='./file0\x00', 0x1a4) [ 183.179690][ T8468] loop2: AHDI p2 p3 [ 183.195467][ T8468] loop2: p2 start 864912876 is beyond EOD, truncated 20:29:56 executing program 5: perf_event_open(&(0x7f0000000200)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfe1d5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200047ff, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x48, 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x48280) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000073c8dceb000000000000000900"/28], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x2000) socket$inet(0x2, 0x0, 0x84) fcntl$setlease(r0, 0x400, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:29:56 executing program 3: close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r1, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) sync_file_range(r0, 0x7, 0x6, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x5, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000380), 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 20:29:56 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r2, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x42) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/77, 0x4d}], 0x1, 0xb281) [ 183.347876][ T8477] overlayfs: missing 'workdir' 20:29:56 executing program 2: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0xa6}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 20:29:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = gettid() tkill(r0, 0x33) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000780)={0x7, 0x7f, 0x1}, 0x7) 20:29:56 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:29:56 executing program 4: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x0, 0x0, {}, {0xffffffffffffffff}, 0xfffffffffffffffd}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b0b, &(0x7f0000000000)='wlan0\x00') ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000040)) 20:29:56 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x20}, 0x1) getpid() syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x5}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "25f290", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 20:29:57 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81d36bb3019c13bd2321af3cf1a54f26fb0b71d0e6adfefcf1d8f7faf75e0f226bd917487960717142fa9ea4318123751c0a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b32a83438810720a159cda903634e369a9e152ddca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd963218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa0000000000000000000000000000000000000000ddffffff020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b9b219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f03000000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b540500a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec309baed0495f06d058a73651d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d971f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad380a447483cac394c7bbdcd0e3b1c39b6e0c410ade7a36b2635d60916de48a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73755539280b064bdaba71f897144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06dddeb61799257ab55ff413c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972ea3b77641467c89fa0f82e8440105051e5510a33dcda5e143fbf221fff161c12ca389cbe4c51b3fa00675cc175067d2a214f8c9d9b2ecf63016c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931ba3552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2af79b8d4c2bf0f7a2cb032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf7f9fe0bc9f2a1a7506d35e5eb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c010000000000000048a9dea00000b91d2309dc7ae49e4d5f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca165cbbbaa2935f602327484386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67aedc00"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7, 0x20c000) bind$bt_rfcomm(r5, &(0x7f0000000180)={0x1f, @fixed={[], 0x11}, 0x3f}, 0xa) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r4, r1}) sendmsg$kcm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="d4", 0x1}], 0x1}, 0xc080) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x2, &(0x7f0000000a00)=[{&(0x7f0000000280)="04", 0x140000}], 0x1}, 0x0) 20:29:57 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000), 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 20:29:57 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x3ff, 0x1c, [0x200, 0x3a34, 0x29, 0x4, 0x240000, 0x4, 0x2]}) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000600)=[{&(0x7f00000001c0)="b0c51017b31e04c8494121b974de2797865e452695ca48dd7b9ff7f2f7446f6f91bff7d246e8d8dc8c43eac6b405ec07542e6a93e382a1c981727fbfecc4bfce952d7e211886e311fab6a449ae0fdc417b13d32c0e34a76b6b3204553d3d418868e7f1c26d667000b0a8aff7a6709832dd72c14647429cc542997a22ba8814a8b8c2433a593e6e3443ddcfd6dd431a715542e3214d800853ac77c600812cb072a1484ad863edc1fecc9fda630b", 0xad, 0x5}, {0x0, 0x0, 0x8000}, {0x0}], 0x8002, 0x0) 20:29:57 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:29:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000001100)={0x18, 0x0, {0x1, @local, 'ip6tnl0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000005b40), 0x40000000000014d, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000000)={0x1, "70b93b"}, 0x4) 20:29:57 executing program 3: close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r1, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) sync_file_range(r0, 0x7, 0x6, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x5, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000380), 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 20:29:57 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x7, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r3, 0xcbbe6000) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000340)={0xe7b66e, 0x1, 0x4, 0x8, 0x8, {0x0, 0xea60}, {0x5, 0x2, 0x1, 0xea, 0x0, 0x1, "b07e9fd3"}, 0x400, 0x2, @userptr=0x9, 0x8000}) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x48280) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x3f, "095ef218a710aee02a580979fdd13d9cbb71403ab737966154d103293cf5a0ed564dba96434cd4d96bd76b73c1eb5c5c27bd941ccf8246655fb4e0bada8559"}, &(0x7f0000000080)=0x63) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x0, 0x2b600, 0x0, 0x1}]) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r8, 0xb01, 0x70bd2d, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8080600}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r9, 0x8, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x80) 20:29:57 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.swap.current\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x4ea00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r6, 0x48280) ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f0000000280)=""/162) write$cgroup_int(r5, &(0x7f0000000040), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000000) 20:29:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x3de}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x4c}}, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x48280) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x4}, 0x10) r2 = open(&(0x7f0000000200)='./file0\x00', 0x1c001, 0x0) fchdir(r2) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) [ 184.486480][ T29] audit: type=1800 audit(1593462597.548:9): pid=8543 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15799 res=0 [ 184.635068][ T8552] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 20:29:57 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0) [ 184.749232][ T8552] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 20:29:57 executing program 0: madvise(&(0x7f0000fe8000/0x1000)=nil, 0x1000, 0xd4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0)='NLBL_UNLBL\x00') r1 = dup(r0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000140)={0x2, 0x8, 0x13, 0x3, 0x4, &(0x7f00000001c0)="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"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="36f30f1ef546cdf2c4412d73d8002636400fc73966bad004ec0f01c966ba2100edc4e12e5e9ff29f0000c4e12df9c266baf80cb82cdcff8cef66bafc0cb842250000ef", 0x43}], 0x1, 0x9, &(0x7f0000000140), 0x0) exit_group(0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 20:29:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x1c) socket(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x4) accept(r3, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x621, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x48280) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0xffff, 0x0, 0x4, 0xe000, 0x4, {}, {0x2, 0x1, 0x0, 0x1, 0x1, 0x9a, "be9f3fa5"}, 0x5, 0x1, @fd=r4, 0x49, 0x0, r2}) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="2f6465762f6e756c6c6230004904542618b89b29e01fd334a44f00af0700000000067405000000b716edfeca35a90792c81cb576a70f8dacb58d0c9669a9e1f9ec47f52f9d000000000000"], &(0x7f0000000200)='./file0\x00', &(0x7f0000000400)='xfs\x00', 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) 20:29:58 executing program 4: setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x2) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004019) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1bd6b84a3f661fb4041e930b2e010203010902120001005135100000000904000000d700c970e0094754021a83de1d066d8381f96b82137837d8240a86e6e7b7b68e05b9e64b761c06d80a836b5ed9e74589"], 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x80000, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) close(r0) 20:29:58 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x48280) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x48280) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x400, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}}, 0x20000090) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000000c0)={[{0x7fffffff, 0x7f, 0x28, 0x6, 0x6, 0xe2, 0x9, 0x1, 0xd0, 0x3, 0x2, 0x9, 0x7}, {0x8000, 0x8, 0x3f, 0x40, 0xff, 0x2, 0x9, 0x7d, 0x2, 0xc6, 0x3, 0x80, 0x3}, {0x2, 0x4, 0x3, 0x9, 0x35, 0x8, 0xff, 0x42, 0x34, 0x80, 0x1, 0xff, 0x8}], 0x80000001}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000240)={0x2, @pix_mp={0xffffff4c, 0x2, 0x50424752, 0x9, 0xb, [{0x0, 0x4f58}, {0xf9e6, 0x101}, {0xffffff81, 0x4}, {0x1, 0x70a}, {0x3f, 0xbab}, {0x3c, 0x6}, {0x3, 0x5}, {0x8, 0x3ff}], 0x94, 0x1, 0x6, 0x0, 0x4}}) 20:29:58 executing program 0: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB='utf8=e']) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x202000, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000000c0)=[{0x2, 0x2, {0x0, 0x0, 0x3}, {0x1, 0xff, 0x2}, 0xfe, 0xfe}, {0x3, 0x1, {0x2, 0xff, 0x4}, {0x2, 0x1, 0x3}, 0x0, 0x1}, {0x0, 0x3, {0x2, 0x1}, {0x2, 0xf0, 0x3}, 0x0, 0xfd}], 0x60) 20:29:58 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) sendmsg$key(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001a00)={0x2, 0x0, 0xff, 0x3, 0x224, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_key={0x1d, 0x9, 0x6f0, 0x0, "f180dad5c2bb5c51480787371883d67b88bad29278ef5cbbb7daa30a7c38f9e5d71f604b5334e8905bf41ac52ad3788b087f4bb5f34ee37b417c6adf1cdc861c5005cce161a297b2d1ff6d78441ec0e94e5acc1d9a911d2cb4f3a1330d058be0ec398dbb326a9af80af7cee28f293f09f71ac8a9659fad8b92b74a86e3a0193f56d322ea6a56a0ec195f73d8cef104fd86b63854f28f70b895af7983b9990f30a47275fdead7a23e5ce48f897ac216148790173b26bf7c336b9df2a5b564f3d7132d928af22cc428cfb1b3b21473877389e9e5c3551d01598fbf76983acc"}, @sadb_key={0x201, 0x8, 0x8000, 0x0, "669ba692742fe941e44edcfa7e79037792e9e0235ff15a9a9e9c3d85095f2300e11b4b998867618a7c99fb85c921c3a89da6d18cfd3b6f416a943a9c1699b2db458e1ad119a4f8e3e3cd52a8d54f5ececfdf8491d1aa4cf606de295c53ef96feebefc2ccb4f26e96f130211c24edeaab11f3fb8b2c89997dfa42dbc0094715044b88322c94e07761fcb64baabc21dcfa33fab5290df10616be26a9e7601ac603f0301d75798a169a5e6a0898b6ee73cf974c72c16efd3fa3ea11612cc6b763e57ba042d120c7e1867012c10804b6bffc34fda17e72090f0806c3ec19a5c6e44a3799a9f2063e0a7db71c0f88998fad74a864c2ddb3de6f0618d2b51fc37183abc38f8c1c3671438dd3c2b760b928b42afdffc58f8329e16befac4560921b904572ff72a23a70cff23fa79de188da46063abea462a5e9c9ef51b357d58a135a54752398fd4e25fb3a06977b256127d6cd9d89bf1868a5a9d3ea187b7409ef4a40bab05ffc19d1ba042e8e4cdd0840065d4d1130eb63a45a058dd022a1f6f9afa608633c021364a21d5375cb95929bbf0461073f0dd09f5caf5ae28d6b0b077411e3c455a943d21cda8e492e2833150e14e76c7299e058a7f2207aba0d6597501566491e722ee6415d63d360bcf9e352f402a855367253d5e61250fffb95bfe829972c07994c5499394810ba06e24e2b83f8c32c603c8c21ab96f672e3ab83f90315947d22518cad600b15596b571863131b7b253b96b92bdc9d046729d5b6138bcc3c5baa1f0ca3a3810433d577cd4250c2a56b0f95df2634e516bbca7312cc73cb628d561557fe3c76c53d41ba4d687855cfb25873e75fc7d1991ee24b16bb3c68441b344852e78e22c713faee0c67dd299ad3beed746b58a16c13563c2c40e77898abb952c42fd69e8856ebc3b9a24d4dd9ef393e82a50cb18d11e22f457705937bd858b2c982407dad8a62bb69d543f06755265490c822b8b7a58117c914f904a938278c4eef99234297dffa5043610961d54bfcc8633ba03f936a040ee89d7c35d5ea16eab5d29c5efabb1c71ba1c234d55148a536a575ff1f81b21a8521cb41538a5eb532680159e8f29d11e5391508855eb1f912f97726d421f23bbfddfb45e4d450277409bef5e0c6bdf95b347896dbacdb42e15aa676d1dd89c5b1879e96b97714e9f5cdd50f59e555a218775d78d3f4034845e160f2be400b23ef92b08e2ece8c9b674338a88fad80bff40b93b2ed49f5d29bdd73a6727a5167f52d9dd9b3d0d2fbc67ab003f4d9c3083327ba51dfb51a21bb3808af65de0fe1e0e1770e5d73e5e39bdaca42db373090512148e529441fe5b9c6d58f922935206a990f450636ff80f94f6b00594aec21d26620b34959bcbe7547c6945e48dd9aaf64cc44664e8af9fe5b7b16cd52606c4134aa4bc42a589739a10b42ac906c291839de079f699e6a72df8a18d192b312fbd3a8927af19fe924547fad0acf4c12134b9da6efb84d261ef936bd22a3b0376af00870994bf98d85e53ebee5aa22ac8be4a74900707224d675dbb2274ff27c8df103c16ccd4fe704af2d3c3d94ad953249c0954b091cce1e46a2c68973c18165114a62d1d82a2f4931138f1b2d08f1e8b0cf597d8f3ac01cd3fdc6d3d9f7358cf147f48abd2ed55f14dc1bc0ac1aefdf6fddd337310a9a0582a45c737182e669664e7223e4a25be018e46c30ffe89c4417a58aa86dc94e6eabe346bf411a0b9e3d32bc80e51e464673663c45bd1da03059ffab6eee75ffbbef205bf30a8477cf74326b47fa26b55ac9744c34e046b7dc9a6c67d15f56e0cb417bd3e8c846f98d5730536a04b29afc9e6b0470f30f54528c1e4c14e3c67ed2b698a91b0a74405833d1ab0b9f74d369d8fd3ff3c2e4aec142c365cf4aba94eaafab1e6aa7714e5e4e297caa5925a8ca4c74eb33d95a879e5942575bbb72825f0609163ecab682ce574245f40d022fc7957d86e87bbf716f50673f3721ff9e38f8270455c92654365147aaf648d22c2ab35adf946d9fb8bd2b98017bafa7149324142601165e23673ce8b1d73a79507b767552ac7ea5627919f46d30b07019af28c17409c1afeca7d7da92c49e30652bd24265c110a90f393c16f68d53d0e4b0f6876b0608c550d7eaabcf5079103137c48e963a02fc655936829fdf3dedc290150c4f836570a7d9257f95abf13500a790c11e0d2df8a1929c9c369a5985abea67aeb44f5d24e1ca734f6795d1a23bb6a95ae6f1f89513b5148837f99699632ed4ffca82543f25d36b9e979017e1e435e5e257bec6c089783c55b8e638c398885455467df6ec465b46ebbd58eb94a6d6ceb303e57adcc9ce5c0e31fe412321190e42902aa8b31a7177c1007b30bf857367b71cae7875a238edaa582b786da8a1f675721f96da2da9c0fcf4cecb86abc3c06041caaeab907d27c223bae40897a72e3cfed67e000a83c38cc6355aefc95ab2a7dc9112c398ad772148220f6e4d391999263fb84635f08120a1b3bc392ff98d02481720f8a4c0a5bde3006b0325c3dc20f207bce955db97b8a6748199cdeb84713d4f6c01c4cf8eb017f3653f93bc9ae7805f173996eed5491d2ba8afcc2f4093f4716d0d553bba2eae461bc15e1ae6f54df176605497f77fd032105be42ca32124aac91c0bb03fd37fe6e708ad25b1b9db2ff5c05dd0b88fbfbda8d3b036e358d6498d5b3ec2798300911f6a776d7f77de0e59cb250da00709c173148cfa163e46631f47745d34dd904b25d59a252e7621b41fb6c3f0626a44a1411137f516e1b94b7a1e7876ec2848b0414dd5b1ccd69f0c712169e7bf7dc620cd13d03d14b5157a95ef7f6aeb02c3f834e918b181c6fd95b766f9e9f5222790f43b890083f93d83df60f35198829c415ac0cc540db3035e65445fd1a957952d89bb8e9c393ecd60ad2f627fcff4e966f4ab38f6acf88b0eef58a99c9a1184b633da5b75fef0a890f81662c2f5cbd6710c9d50c2a6bb99fd46bdd54fe7898f27664cf912997d2f40eddbc99b1a875f0e1fe2fbf938f2a48a2b70f5213fd57f611bf7b04df6cfc6f918a762ea6cff1a194344be17e5a7a8236e6f15b211d118d2434b2110b85669c6a37d704985e7f0a05ae64361e9d0c09a92351aeffbdc6da82d1a1b70177624f884993ef0461b407d64e9a99c5a6d6fa027b079bf62a9713444e814a464d0bc19e94affb5e5e17c0753ee2cee7fb4efbe3da050e72bfb7e04a7ba6c80789e65660b69afd7944d4da00eaced8f760618d45dfd1ab44e8d4157c7f6948cb45f7db209f5b187a3dd1279261152bcc938053b70b7a3360c962a3446bdf5fb9e79999dc2880620cde24384148113750f253050d73e16e3f3977f82aa3c96ddd4fec2baf5eb8e8b0dca89ea3a8c10c5338b84dc3a43a75143c10bd0a7edde707a7632109be03073e147c8e4a0bfa44b25772ede22bf9638338a1ac2b91f640eabda191530c3aadfd0c02724a3a15618060657d037080577c9562a110c3f12e6831e8b89b6adf55ac36bb344a0da4fdd39e2962ab8e269e78005d8e95115208cf520b6ed0b6682e332633a80aebc55842c42df15d51e489fccffb2ff2be0e8432cc627ff05b20d95b4bc36a3da41ef9b069a52752cdf6a0231d8fe9ec1469204613f4182e2d67406ec973d9295adb85163536beed363dd71056a0ddf9d064e6761eeb29b2ae0129e38d08e6f2d6f7f87b28c1f50f4bc71fb42f57337cfad81977e4cb90fc1da9faf669fe8da5366809490e85d280f55cd27e292e81395c9285a0400fc220bacb377563d27f08be0d47b68f5752179458cda95660e0cbf0c25a34bde1816f495829c0409fb276019d21aba45d75fc3160382595fe78d719cc3ff95355745bbf0a3200f18644a03f8384bd93798b70aabdf253032ccdf3c6118369cf0ebbed21bccd6e6aa1f1c3e0f3d06349d54255c111894b44b358ddbcfdd1dea861982835557de87bd901dd56f42d223ed60ba2420a1f962226463cdf5c1f7012b82e71e6bdfa02d825653786ad2fc71c0df79436c85d6a05ddb828aba521d222f6d4539d329c362817161cdb9f4ce2c51acf04b8bd74e89b6d5361999efe81627f22abaa4840648909571d4ad2d079d8711170cdc9eee2cb7f7b0d0e7f334f40e9a572dc0ed6105051c1e24f885f182094c7ce9aed2b00d80617eae71ec72f5028337a97f665abce8fa128dc27134c87c3eff550b797633839c9553f6e7a7197d00cd4b41a1115ce34a22198262077b1a1191896351f6f10af91c27d268a2b21b5834a73b2fb06cf9277d8ed0ac4dbdbbdf1e6e68540050f17cd83b920dd8d04da294e8f6e0f954eb7fd92f31d7d3144266409a98cd1134a1de9c5ce855d5e0af771768297b65552577154e0dc2fbe9a7564bc988435fb6067ba77898f7c81d28addadfd64fb839eaee7a3ed04e7e60013542537272e6b31570ad42a60d11844440a2a259219c0ac06abf77f924e67278ad2efa14b6c5df372f56b876b18e36ef1a03ed70e37b756a4a9d5e893966985ffd7dcafb31f2db02e4a924736ff7d044a4775cfc4d1b909bef9eee1df9af0f145387e41b7ab9403010b9c01f69ff71718bf0d9e4aae0161c5de00bd49b888f66a50023087983a434f6dffb41dc7608774c1d3e4cdaa824290b74fd0c4dd198273cc17a2415c5166b05d679b483f81bd5d2c3a3e0f4580a5c18dce20dbcc81eb7ad75aafc894a594c78f175e3216d087b9822413dc8cc3998ebd28485343f1d895671b3374eaba821f4a37666446ffcc5562867965f29f9d512a9a6a5af2c65714e09fbf86b04037f68ba3a0bee39047993c897bb50faa45323560c958820fee50e74c3445283be6f2428a549e02612055fbb9ac9c4d448259aa7b19b63234f16585d60634783d940ecc557b0966b85f5952740e4be94745c64a26319418c497d34fff3344ac6d265c1f928ce061fc7013f0e2c7811b349d5b1f566ed270776928888dd78c2d7980dcd2ec80f198f8719cdc2c100797e98b0532bd871336e8f54e425bc110ce82885a7b9f6d98f42d42b6ee640e07ec2ae008d93a8faf94c744ac537cf2d6737db96e16cc3d9b4c6451f84e8c75c0dd62d937e9273e7eaac872a0d11859324b9d732b513a4fd27f64a65be0dbcd2f7aba4cf9f838422a4022bcbe3c490bb96b02b76ad5e4bb47e8f7a08063700ece1cfff735887ec11eef27b6aba2e6164cc85ac72ef704e627b68c0760c669e4eb9b7b9258462367835c9dd78511933de298adab3dd0330b963804bfcf13833a01b816eb7cb2ba5962ef66ccb37f8a9b3cb71b9f4f9b758602ad5d09a1fe75914c045973d2549f24db4889864202922d33df0fa693c7a6c187b6df6909675f9b0e44831e2ab2ba80165a1df848788ce02f354817d6977af387903b333cc4122093c9d74082485d7f0788e5727b35301bb99cef2beca5da312ea7acdf04b9f1c7a0d7d443986fd416f52443cea2fa7f140efb21b247379d4505df313c3374b6e603b48e2d2a7a22ff2cec02d87373821c2980e16ba961948081acfd80e9f97a59513910c44439f5bf87c9d37178db1338a274b1c6864de7b0d8ef77e039d0b5c2a31062e98557405729188e226e7bfaddcfa51d9add8fad87ad8329f3390b8bf9308235ffd5d73a8efd5c9019a06ed209eb42f00c762053783cf237ff083dfa3faae7fc4dd4b064cd08129cadf0ee33baba88eb4cb55da83e273d69df81fbaf2e7b786268500fe05df4bba844efdf6d94134cd992eb7f2dc4e6ceb9774bbd87d8ca777a0f"}, @sadb_ident={0x2, 0xa, 0x6, 0x0, 0x81}, @sadb_ident={0x2, 0xb, 0x6f, 0x0, 0x7}]}, 0x1120}}, 0x1) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB], 0xa0}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r3 = socket(0x1000000010, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\')I\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000020000000a0001006261736963000000200002001c00028008000100232e0000100002800c0001000000040000000000"], 0x50}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 185.226842][ T8590] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 20:29:58 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0) [ 185.359641][ T8577] XFS (nullb0): Invalid superblock magic number [ 185.402060][ T2484] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 185.412740][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.492809][ T8590] ntfs: (device loop0): parse_options(): The utf8 option requires a boolean argument. [ 185.579807][ T8590] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 185.616673][ T8607] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.663855][ T8603] syz-executor.3 (8603) used greatest stack depth: 23920 bytes left 20:29:58 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x48280) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x48280) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x400, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}}, 0x20000090) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000000c0)={[{0x7fffffff, 0x7f, 0x28, 0x6, 0x6, 0xe2, 0x9, 0x1, 0xd0, 0x3, 0x2, 0x9, 0x7}, {0x8000, 0x8, 0x3f, 0x40, 0xff, 0x2, 0x9, 0x7d, 0x2, 0xc6, 0x3, 0x80, 0x3}, {0x2, 0x4, 0x3, 0x9, 0x35, 0x8, 0xff, 0x42, 0x34, 0x80, 0x1, 0xff, 0x8}], 0x80000001}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000240)={0x2, @pix_mp={0xffffff4c, 0x2, 0x50424752, 0x9, 0xb, [{0x0, 0x4f58}, {0xf9e6, 0x101}, {0xffffff81, 0x4}, {0x1, 0x70a}, {0x3f, 0xbab}, {0x3c, 0x6}, {0x3, 0x5}, {0x8, 0x3ff}], 0x94, 0x1, 0x6, 0x0, 0x4}}) [ 185.712018][ T2484] usb 5-1: device descriptor read/64, error 18 [ 185.751943][ T8590] ntfs: (device loop0): parse_options(): The utf8 option requires a boolean argument. 20:29:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0f234e66410f6353f066baf80cb87a221788ef66bafc0c66ed440f3040fd66baf80cb809528a86ef66bafc0cb000ee2e0f01d166ba4100ec3666430f129927a00000c4e1a157d2", 0x47}], 0x1, 0x60, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) fremovexattr(r5, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:29:59 executing program 2: socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x10000, 0x0) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000180)) 20:29:59 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$setperm(0x5, 0x0, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0) [ 186.112326][ T2484] usb 5-1: device descriptor read/64, error 18 20:29:59 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x48280) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x48280) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x400, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}}, 0x20000090) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000000c0)={[{0x7fffffff, 0x7f, 0x28, 0x6, 0x6, 0xe2, 0x9, 0x1, 0xd0, 0x3, 0x2, 0x9, 0x7}, {0x8000, 0x8, 0x3f, 0x40, 0xff, 0x2, 0x9, 0x7d, 0x2, 0xc6, 0x3, 0x80, 0x3}, {0x2, 0x4, 0x3, 0x9, 0x35, 0x8, 0xff, 0x42, 0x34, 0x80, 0x1, 0xff, 0x8}], 0x80000001}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000240)={0x2, @pix_mp={0xffffff4c, 0x2, 0x50424752, 0x9, 0xb, [{0x0, 0x4f58}, {0xf9e6, 0x101}, {0xffffff81, 0x4}, {0x1, 0x70a}, {0x3f, 0xbab}, {0x3c, 0x6}, {0x3, 0x5}, {0x8, 0x3ff}], 0x94, 0x1, 0x6, 0x0, 0x4}}) 20:29:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010b0000000000000000000000100000020077673100"/34], 0x28}}, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f00000000c0)={0x3, 0x1, 0x17, 0xf, 0x132, &(0x7f00000004c0)}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="8d79396a5ac29135c08991e46d2112ccde4580a4ead25a80648ce3751d858cba2c1463940d0424fc600c0018400dac0f000cac0f0037153e6709020f8001001700d1bd", 0x43}], 0x1}, 0x20004000) [ 186.392002][ T2484] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 186.405789][ T8660] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 20:29:59 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x1a2, 0x0) [ 186.762030][ T2484] usb 5-1: device descriptor read/64, error 18 [ 187.161996][ T2484] usb 5-1: device descriptor read/64, error 18 [ 187.282874][ T2484] usb usb5-port1: attempt power cycle 20:30:01 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x48280) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x48280) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x400, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}}, 0x20000090) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000000c0)={[{0x7fffffff, 0x7f, 0x28, 0x6, 0x6, 0xe2, 0x9, 0x1, 0xd0, 0x3, 0x2, 0x9, 0x7}, {0x8000, 0x8, 0x3f, 0x40, 0xff, 0x2, 0x9, 0x7d, 0x2, 0xc6, 0x3, 0x80, 0x3}, {0x2, 0x4, 0x3, 0x9, 0x35, 0x8, 0xff, 0x42, 0x34, 0x80, 0x1, 0xff, 0x8}], 0x80000001}) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000240)={0x2, @pix_mp={0xffffff4c, 0x2, 0x50424752, 0x9, 0xb, [{0x0, 0x4f58}, {0xf9e6, 0x101}, {0xffffff81, 0x4}, {0x1, 0x70a}, {0x3f, 0xbab}, {0x3c, 0x6}, {0x3, 0x5}, {0x8, 0x3ff}], 0x94, 0x1, 0x6, 0x0, 0x4}}) 20:30:01 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000280)=""/250) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5e, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)) 20:30:01 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00', @ANYRES16=r2, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100c0}, 0x48042) fchdir(r1) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256-ce\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x7fff, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='schedstat\x00') sendfile(r3, r4, 0x0, 0x7ffa) [ 188.012112][ T2484] usb 5-1: new high-speed USB device number 4 using dummy_hcd 20:30:01 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:01 executing program 4: clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000080)={{0x3, @null, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x290c302a) keyctl$read(0xb, r1, &(0x7f0000000000)=""/24, 0x18) keyctl$get_security(0x11, r1, &(0x7f0000000000)=""/20, 0x14) [ 188.219740][ T8693] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de 20:30:01 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0x7, 0x2, 0x80000001, 0x5, "9529a12bb891cf273231e7e7fe42fe2b4699c0"}) syz_mount_image$jfs(&(0x7f0000000240)='jfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@nointegrity='nointegrity'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'gcm(cast6)\x00'}}]}) [ 188.372096][ T2475] usb 1-1: new high-speed USB device number 2 using dummy_hcd 20:30:01 executing program 3: unshare(0x20000400) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8980, &(0x7f0000000000)={0x0, 'virt_wifi0\x00'}) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000040)=""/157) [ 188.502195][ T2484] usb 5-1: device not accepting address 4, error -71 [ 188.782533][ T2475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.820531][ T2475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.857602][ T2475] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 188.892036][ T2475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.913716][ T2475] usb 1-1: config 0 descriptor?? 20:30:02 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) r2 = dup3(r1, r0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xffffffffffffffff}) 20:30:02 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0x7, 0x2, 0x80000001, 0x5, "9529a12bb891cf273231e7e7fe42fe2b4699c0"}) syz_mount_image$jfs(&(0x7f0000000240)='jfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@nointegrity='nointegrity'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'gcm(cast6)\x00'}}]}) 20:30:02 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c6e66735f6578706f72743d6f6e2c00b237931200db5b575bbc6f89a702a301f3a158b9fcce8be168484831b228970d3d75abafdd534d24820d6374dd0b51bd7c4fbce60a441c2a3c91d8e069e6cbafd878353916bba059e561ca38dd4c8743228e7d74ea80df94121df0abdaaa3c05da122edfce361ef4cd69ce0d99d5e9a83ade4c1c0c4f3cc2d9d682acb282b6cda409245b79c3dafb50dfc5b4bfc3b545ced3e7031bd5774ce9908a9953867f89477de5787701341c"]) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={0x8, 0x5}, &(0x7f0000000300), 0x400) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) accept4$unix(r1, &(0x7f0000000180)=@abs, &(0x7f0000000280)=0x6e, 0x40000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004103) 20:30:02 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000814) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r2, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r3 = accept(r1, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x80) recvfrom$l2tp6(r3, &(0x7f00000002c0)=""/42, 0x2a, 0x40000061, &(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000000)) 20:30:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket(0xa, 0x2, 0x1f) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, [], 0x1}, @remote, 0x3, 0x5, 0x401, 0x500, 0x3e, 0x100000, r3}) close(r1) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 189.385978][ T2475] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 189.389041][ T2475] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5 [ 189.500334][ T29] audit: type=1800 audit(1593462602.558:10): pid=8736 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15834 res=0 [ 189.512809][ T2475] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 189.588872][ T2484] usb 1-1: USB disconnect, device number 2 [ 189.598324][ T29] audit: type=1800 audit(1593462602.658:11): pid=8739 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15834 res=0 [ 189.599236][ T8739] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 189.599344][ T8739] File: /root/syzkaller-testdir461578643/syzkaller.p5ATw3/16/bus PID: 8739 Comm: syz-executor.4 [ 190.532190][ T2479] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 190.892261][ T2479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.903812][ T2479] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.918467][ T2479] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 190.928985][ T2479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.941904][ T2479] usb 1-1: config 0 descriptor?? 20:30:04 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x6, &(0x7f0000000040)=[{0x0, 0x4, 0x9, 0x3}, {0x7, 0x8, 0x0, 0x1000}, {0x9b7f, 0x3, 0x6, 0xd38d}, {0x1, 0xbf, 0x3, 0x235}, {0x200, 0x0, 0x0, 0xa6f7}, {0x81, 0x1, 0x7, 0x40000000}]}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000005c0)=ANY=[@ANYBLOB='[d::],0::6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='ceph\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) 20:30:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000814) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r2, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r3 = accept(r1, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x80) recvfrom$l2tp6(r3, &(0x7f00000002c0)=""/42, 0x2a, 0x40000061, &(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000000)) 20:30:04 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r2, r0, r1) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:04 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0xa14, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x3, 0x3, 0x8, 0x101}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004044}, 0x80) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r2, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r4, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r5 = socket$caif_seqpacket(0x25, 0x5, 0x3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000380)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003080800418e00000004fcff", 0x58}], 0x1) 20:30:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xd3, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5}, 0x19044, 0x0, 0x0, 0x3, 0x0, 0x3, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0) getegid() r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0x7, 0x49, 0x20, 0xb, 0x0, 0x4, 0x8c, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0xc06e6c6293c36616, 0x2, 0x6, 0x4, 0x2, 0x6fa5, 0x7}, 0xffffffffffffffff, 0x40000000003, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x10010, r1, 0x4) 20:30:04 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}, {@huge_always={'huge=always', 0x3d, 'prefer'}}]}) [ 191.120807][ T29] audit: type=1326 audit(1593462604.178:12): auid=0 uid=0 gid=0 ses=4 subj=_ pid=8791 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f95a code=0x0 [ 191.131323][ T8801] tmpfs: Bad value for 'huge' [ 191.146495][ T2479] usbhid 1-1:0.0: can't add hid device: -71 [ 191.153656][ T2479] usbhid: probe of 1-1:0.0 failed with error -71 20:30:04 executing program 2: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000000000009381100080000000c000000100000001400000300000001", 0x65, 0x1400}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0xd7, "d33e2c59983e4a458fcccf2358641520422ba63e3503c63ce7faf65f0ae07b9a80dca06b63fa43633e435df0fd7a0fabf7cd361f665a84aada7c887b60fe9851a087f1fd3a507214477d32431487a054f88510cbd67914e6b2325aa8aaadfec1231d5a0d3349ad3d823b343347b4f7d3b79df54f7bb7fd31bc54788c13669520011856329895e2add6bd985493d7db7c87458d377b205448c186397c56113c96602d6c39e2f4479da054bcb88aaefc6b5c67d22356a1fdb5fbdda86a481720d63081f95448ed6664c1b6d9881201baf7cbf1afe73aa288"}, &(0x7f0000000000)=0xfb) [ 191.182812][ T2479] usb 1-1: USB disconnect, device number 3 [ 191.277360][ T8801] tmpfs: Bad value for 'huge' [ 191.397788][ T8822] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 20:30:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fchdir(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x48280) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x48280) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x48280) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x18}, 0x0) 20:30:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x4}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000002c0)={0x0, @bt={0x1, 0x9, 0x0, 0x3, 0x1, 0x5, 0x10001, 0x3, 0x5, 0x3, 0xef5b, 0x1f, 0x1, 0x7, 0x4, 0x8, {0x9, 0x8}, 0x9, 0x5}}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000180)={0x4}) fchdir(r2) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f00000000c0)=""/141, 0x120000, 0x1000, 0xea, 0x2}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000580), 0x4) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0xc0800, 0x0) vmsplice(r6, &(0x7f0000000540)=[{&(0x7f00000003c0)="76f1eea986c60d27b25e3902", 0xc}, {&(0x7f0000000400)="f06b5688b81f2a18417937d3ae8238991ca569d4922b378f1dc6c8670400aeeceed197cf6f778872c8f15f43ae706dafbe1b40482b038d3e1b37c868c3ea7749be32757187c8f64ca2e0227054618d1433d01967f058dd6a78fdb7755c", 0x5d}, {&(0x7f0000000480)="434f3a606c1711b89a761e8411597b9bc798bcd7e47a47e8eccfc2d12f9d7b4da4f9683f93ff8bb29616e0a4b301d1970584291f0798fab12521d1edcbced0b8e444ffb236397acd7367f75d60ffc9b6f184d613a2204cbfd11d94befb5357df9e0f2a52c2bf989a63b2a09c1445a11602351639c223d455f4feeb465f2f83d383f633f50c5d2127", 0x88}], 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0xa0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) dup3(r4, r0, 0x0) [ 191.483564][ T8822] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 191.496620][ T8822] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 191.518611][ T8822] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 20:30:04 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) write(r1, &(0x7f0000000740)="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", 0xbee) creat(0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x48280) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) 20:30:04 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}, {{&(0x7f0000000080)=@alg, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/252, 0xfc}, {&(0x7f0000000240)=""/187, 0xbb}, {&(0x7f0000000340)=""/65, 0x41}], 0x3, &(0x7f0000000400)=""/117, 0x75}, 0x9}], 0x2, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x48280) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000300)) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r0, 0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000)) preadv(r2, &(0x7f00000017c0), 0x1a2, 0x4c000000) 20:30:04 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) socket(0x11, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000080)='/dev/aats\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000004, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/udplite6\x00') open(&(0x7f0000000100)='./file0\x00', 0x101000, 0x4) [ 191.695309][ T29] audit: type=1804 audit(1593462604.758:13): pid=8839 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir461578643/syzkaller.p5ATw3/18/file0" dev="sda1" ino=15863 res=1 [ 191.759500][ T8842] FAT-fs (loop5): bogus number of reserved sectors [ 191.862877][ T8842] FAT-fs (loop5): Can't find a valid FAT filesystem 20:30:05 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 20:30:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], &(0x7f0000000100)=""/130, 0x9e, 0x96, 0x8}, 0xfe6f) 20:30:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r1, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r2 = accept4(r0, &(0x7f0000000100)=@x25, &(0x7f0000000000)=0x80, 0x80800) write$binfmt_aout(r2, &(0x7f00000001c0)={{0x108, 0xfb, 0x6, 0x242, 0x1f6, 0x2, 0x20, 0xfff}, "baa1b1f0d1eaecce670744047dc3af504daa9886e49b55507c2655565e3865b2af7bb5cb85eb52fafdd81300cc4edf0936f8713257d9136a48cfcd363b6a683577961630270ab734654bcf64fb841e5440ff7a213fc4e632923fa2e9502f35d59fb61383dbc29e41472d2e1b75106337a5b78d7ac128abf1c3e38f21bb340d6a4ae31cbc4845ed31684e659134049b40500cfdd8786843cb120e5a44b6183cb53fce43528b6a24d4e43e387e5797b2f09081f6bd9a0b222c62bfdd4a", [[], [], [], [], [], [], [], []]}, 0x8dc) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xa156, 0x0, 0x0, 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB="666d81759c0600ed90f264d137f301c222be15fa24c65a2aa95016efedf6cf7d462b4899b67383835bfef9d1ca851f229478f98e6858fd1aae0a1b1bd5680cdfee2556a601a65d67311d04804c854a0129b6f8c76ec803354862044af0503c654a"]) 20:30:05 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r2, r0, r1) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100]}, 0x40) socket(0x11, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000080)='/dev/aats\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000004, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/udplite6\x00') open(&(0x7f0000000100)='./file0\x00', 0x101000, 0x4) 20:30:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 20:30:05 executing program 0: getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xa, 0x0, &(0x7f0000000100)) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000300)={@multicast2, @empty}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010001fff000000000000000000000008", @ANYRES32=r3, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="8212a47d4acc3ff1fd880e13ad44de2095df683e2ef151963cd85c861dc7ff22efb3092896faa3397c0e0fcb1b704023fe9bc0de4c5875fdb538f1558f4de1af106c473779f8e598067286d7ee5a61d2679d"], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', r3}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0xffffffffffffffff, r6) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@rand_addr=0x64010102, @in6=@remote, 0x4e22, 0x7, 0x4e23, 0x4, 0xa, 0x0, 0x40, 0x89, r4, r6}, {0x100000d738, 0x147, 0x2, 0x10001, 0x7, 0x0, 0x9, 0x6}, {0x9, 0x8, 0x7, 0x6}, 0x7fff, 0x6e6bb1, 0x2, 0x0, 0x2, 0x68ee692afe0fcf5c}, {{@in=@local, 0x4d5, 0x6c}, 0x2, @in6=@ipv4={[], [], @multicast1}, 0x3506, 0x1, 0x2, 0x9, 0x9, 0x4, 0x8}}, 0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket(0x1, 0x5, 0x0) getsockopt$sock_buf(r9, 0x1, 0x40, 0x0, &(0x7f0000000100)) 20:30:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = dup2(r1, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r2}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r3, 0x4) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = creat(&(0x7f00000004c0)='./file0\x00', 0xc0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r5, &(0x7f0000000880)="353aa4b6d7b5dbd83f134a086e035c6cfcf1925418c2fa62ce3218b88442782ed3d041e95df64a53b6619b1ccde7483e795039c9939ef40d3abf5e7e4faa3e709b9907a68203ddbf5f14559d28ac3a5479c4efafc5c66c2c", &(0x7f0000000500)=@tcp6=r4, 0x1}, 0x20) 20:30:05 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r2, r0, r1) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0) [ 191.906775][ T29] audit: type=1326 audit(1593462604.968:14): auid=0 uid=0 gid=0 ses=4 subj=_ pid=8804 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f95a code=0x0 [ 191.964347][ T8803] ceph: No mds server is up or the cluster is laggy [ 192.516088][ T8882] bridge1: port 1(bond0) entered blocking state [ 192.518185][ T8882] bridge1: port 1(bond0) entered disabled state [ 192.530906][ T8882] device bond_slave_0 entered promiscuous mode [ 192.530999][ T8882] device bond_slave_1 entered promiscuous mode [ 192.534067][ T8842] FAT-fs (loop5): bogus number of reserved sectors [ 192.534084][ T8842] FAT-fs (loop5): Can't find a valid FAT filesystem [ 192.554309][ T8877] device bond_slave_0 left promiscuous mode [ 192.554347][ T8877] device bond_slave_1 left promiscuous mode [ 192.554416][ T8877] bridge1: port 1(bond0) entered disabled state [ 192.880432][ T8899] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 192.942452][ T8901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 20:30:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 20:30:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 20:30:06 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'REJECT\x00'}]}, 0x54}}, 0x0) timerfd_create(0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019041905000000000000000002200000ff02ff000000000008000100ac141400180094001100040090f7c10f4b3190b58e1b77481e35fd008a0000"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0xfff, 0x0) 20:30:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @private=0xa010101, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x6, "e3d340"}, "ccbfc12abc282c27820fd9118600820e000500110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r3, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x48280) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f00000000c0)=0xfffffff7) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) 20:30:06 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x48280) syz_open_pts(r2, 0x410000) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r0, 0x0) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r6, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) write$6lowpan_control(r3, &(0x7f0000000280)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) [ 193.851107][ T8918] bridge2: port 1(bond0) entered blocking state [ 193.880971][ T8918] bridge2: port 1(bond0) entered disabled state 20:30:07 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) [ 193.918358][ T8918] device bond_slave_0 entered promiscuous mode [ 193.924947][ T8918] device bond_slave_1 entered promiscuous mode 20:30:07 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:07 executing program 1: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:07 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) getresgid(&(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r1, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010b0000000000000000000000001400020077673100"/34], 0x28}}, 0x0) fcntl$dupfd(r0, 0x406, r2) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002480)={0x2a08, r6, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x209c, 0x8, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x5c0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x296}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ALLOWEDIPS={0xec, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x19}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x7f}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0x49c, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x3d}}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0xf}}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}]}, {0x6bc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x658, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x26}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x4}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @private=0xa010102}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x16}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f2d54ef70b22f88bfb40e96dee48d01ccc396b21dc87de96303c75446610cec8"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:07 executing program 1: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:07 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) [ 194.540063][ T8930] device bond_slave_0 left promiscuous mode [ 194.546462][ T8930] device bond_slave_1 left promiscuous mode [ 194.591129][ T8930] bridge2: port 1(bond0) entered disabled state [ 194.791323][ T29] audit: type=1804 audit(1593462607.848:15): pid=8955 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir156038520/syzkaller.7uX5Dl/21/bus" dev="sda1" ino=15885 res=1 20:30:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001ed01edbfa30000000000000703000028feffff720af0fff8fffffe71a4f0ff0000000034040000010000005d400300000000005504000001ed000027000000000002001d44030000000000630a00fe000000002f00000000000000b7000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1b6a69b002e7f3be361917adee9ee1c8a2b4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779923e6440c2fbdb00a3e35208b0bb0d2cd8dff0c710e4cdbf4fc41fbba4f94329e646b8ee6de2109fbe4ef154400e807d63cafa2438ec649dc74a1a610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123ded79f903a8a3658d42ecbf28bf6c76c15b463bebc72f526d8e8afcb913466aaa7f1af9dbae2460d0b11008e59a59fab9100eb53987ad1776e72ba7a54f0cdc3a6138d5fcfba53f8d0c67ff616236fd9aa58f2477184b6a89adaf07b0a6041bdef928d236619074d6ebdf098bc908f523d228a40f9411fe7226a4040996e37c4f46756dfc1538ff7f0000279132d5ef0600116cbefaca1f000000000000009d8f5a5557785d985a163458731f298d5140c9fe90dc66b257b0c0295afab36f353e1bc1574a6305790a25cdf085aa4192696ebbf416c0820e106e29d9654fce8ff4de960b344788b0ae6e1d41728a7b2014beddf3fbfa6082fbb36c8e235b4a2ea6c63adc3bf02d67b11f8fb0f64009fc03e060847a6c76f8601899040a539e6bd1035869070a4779af73a30046ae94937c0d6dc233866d49200e2b6aed2c09a000454573d185cbe6f6458f8861b92dc7caffa7c1b7520f5a60d7e7478b06825a91d7055e8032d060c61454e899b6e29b9f726de7653d5307c2102a38d48ebdc8c853400900b346e43e3637fde6e137d35267c37200001fe41c645f3b6fa9baebb3e42f648af9abba14b578f43b1aad90fe931cc77bc169a74da221ce280c149c1bc49fc422830747f99be5fd4e51f0c340d6fc8e6c73680300000041c565969111210f75c4776d319be8a5d3378d493868614b79b2f24d3dd34dda6a931135244250610b3798cd644285d915e5f44391fea1bbf70b0500000000000000669c381c695907199a46a5997f7ceaaada5c2d80de14beed0000000000000000000000000000000000000000000000000000004befd57363532929fd9609d5ad41cb5081b7fe54ce8b00636fd98ba9ece55af728cb40041497290d440e4a14cba92a97b5423da3ada4cc7ea06a586778e53337d65f595de289d8b3125ffaf177a6cfad82f3b5c70f1a62aee6173fd4e9068815e8fbb8479a154d7805f2df2fae02835c73b8615888cc3f6ed2b08211f594816fb17c637b664bfc4a7050e7e6ba9c2d194ebe1828f73b7d9bd45242c54a4f1d91bab2e197fde1bb40913961bbb671d3c4f38af4db7b257267026d4b4a6c72e3612ef02d4b8f4b9475782c5689926445ebc475ef2e9008d1f38c82f9a1677d3b253e28374b742dc0bf26684dabf1cf6e1e28f5360f779eccbd4b121a02a4ddc3d2df52aa1bb090890e1d27a940cd1ff617a2fcecf8515222b6bb67ef71cd4d38f3cf7970ed93bc707a86ebabe3fc37afa7811a86fed3f44dee2de5302f7ccd1c17d175ea8ad232c47f9cab458ab86d6f5a191c3cbd2e95e9d81f069d42632e2c9462322423d35ca8e24a6cdac286ed49f9"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 20:30:08 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000020605000ad2b7994f7183db2884ff8c658021f800080000000000000000000d000300686173683a6d61630000000005000400030000000900020073797a300000000005000500000000000c00078008000840000000000c00b056aeedc21c0bc50000d3283a"], 0x58}}, 0x0) 20:30:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x4}, 0x8) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x48280) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000180)={r2}) exit(0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x7fffefff) 20:30:08 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x18, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) [ 195.070574][ T8984] bridge2: port 1(bond0) entered blocking state [ 195.075405][ T8992] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 195.111186][ T8984] bridge2: port 1(bond0) entered disabled state 20:30:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}]}, 0x40}}, 0x0) 20:30:08 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) [ 195.178251][ T8984] device bond_slave_0 entered promiscuous mode [ 195.184619][ T8984] device bond_slave_1 entered promiscuous mode 20:30:08 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='hufe=always']) chdir(&(0x7f0000000380)='./bus\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') preadv(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0xfff) 20:30:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0xd22}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000140)=&(0x7f00000000c0), &(0x7f00000001c0)=0x18) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x25) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3, 0x101002) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000002000000800000000000000080000000000000004bef0000000000006909000000000000ff070000000000000300000000000000080000000000000000000100000000000100010000000000050000000000000005000000000000000000000000000000050000000000000003000000000000000001000000000000000000000000000000800020000000000300000000000000"]) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200187ec, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x1000001bd) [ 195.247154][ T8998] device bond_slave_0 left promiscuous mode [ 195.253620][ T8998] device bond_slave_1 left promiscuous mode [ 195.287755][ T9007] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 195.302551][ T8998] bridge2: port 1(bond0) entered disabled state [ 195.405133][ T9015] tmpfs: Unknown parameter 'hufe' 20:30:08 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0xbfd7, 0x7fff, 0x8000}) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4044005) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x2f7, 0x35, 0x0, &(0x7f0000000280)="b95b03b75b030700009e40f008001fffffe100434000638477fbac14143ae0000001c699da153f08a0e6e380f60105f683317585d7", 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r1, 0x11, 0x1, 0x6, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x4000) write$cgroup_int(r2, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100)) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)=0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) 20:30:08 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r1, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r3, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r5, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xfffffffffffffcf6) setreuid(0x0, r6) fcntl$getflags(0xffffffffffffffff, 0x1) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0) 20:30:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100000000004026093333400000000001090209cd6649e54bd3040000010301176ec6d34431515087041e868848be22f7ae55cbe223a2d55fe2ca0d3f0248dcc86686474d80865ca8962c27cd70f59d884e7320e9e677912e004b2293f8041e9874e02d5bc61b7eae9137bb66fde2e4ed7adc896b9b2024a1d53f3cb11ec333a47d514c25c30c93743341e1f4caa28c8872e17b822d350e06678d3f00"/168], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x40, 0x9, 0x81, {0x81, 0x30, "22c72c1391b76c26b4588f56857195cb168f64e2f23dce12599589324a9876798df53037492a26f77576e9381b88646da3e855e81d7204acb178a919baa6107fe650f78a3d764a4811daca5ebf9ce6bd85850cbbe76e0133959e679d1569db1fd94e25cf6ccee1a05c823de2658e7fdb001ef83ab81818122fa57d886d7b09"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}, &(0x7f0000000080)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xc, 0x3f, 0x9}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x4, 0x2, 0x7, "0b8c8959", "a9b8ef89"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0x8, 0x7, 0x3, 0x4, 0x3d0e}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x14, 0x34, "3552d3255930a99907de01090a59078a4ddaa2f4ed612dc5a6cbc115cc0b324287c03f1928c21e04cee2dece824941b518a47abf"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x40}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x7ff}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000004c0)={0x40, 0xb, 0x2, 'd\b'}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000540)={0x40, 0x13, 0x6}, &(0x7f0000000580)={0x40, 0x17, 0x6}, &(0x7f00000005c0)={0x40, 0x19, 0x2, 'Ld'}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x800}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x41}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 20:30:09 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$TIOCCONS(r0, 0x541d) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="0200ee7e00ff010012008107008d0300000000a440f03562e3493c0000000000180000010400000000002b127d370000000026cce8cd082219dd625f000055aa", 0x40, 0x1c0}]) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000000)={0x3, "b8fe5fd53fd09ba5e3ad2b374ae5aa6b8afb8108f7ac3f4f76700c9a06b1ce30", 0x2, 0x1}) 20:30:09 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:09 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800c945", @ANYRES16=0x0, @ANYBLOB="010b0000000000000000000000001400020077673100"/34], 0x28}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="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", 0xfe) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf25030000000c000600010001000100da3326cf8efffaf5000040000008000100000000001b77c3897f3a8b1b549dd4b368caef89d75fa2589423becf41588667ce78a393cd2cd9cf040615d0dd9c0a61e23535e32992a3660685380e80682c18150df1f0973ebf618f8f5fb73b09ae223b42230c1957d487bf66b866a412b77dfc79941c6405dbacba7f9d0c7511728eb954c5eece8ab4374399af180e23311eb96a89a67cd25d88154eeb3f03aeb80be3a86afb15eb87676bb8df36"], 0x40}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000010) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x5c, r3, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0x0, 0x4, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xb}, @NBD_ATTR_TIMEOUT={0x3d, 0x4, 0xd4b}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}}, 0x40004) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xffffffffffffffbb, &(0x7f0000001240)={&(0x7f0000001200)={0x38, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xdf4}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48865}, 0x20000010) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmsg$nl_route(r4, &(0x7f0000001180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000430000042bbd7c00fbdbdf251c000000080004004bd31254080004000400000008000400060000000800030001000000"], 0x34}}, 0x4000010) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}}], 0x1, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0xdc}}, 0x24) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0xfffffffffffffd75, r6, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0xba5, [@default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) [ 196.220077][ T9047] Dev loop3: unable to read RDB block 1 [ 196.238568][ T9047] loop3: unable to read partition table [ 196.258604][ T9047] loop3: partition table beyond EOD, truncated 20:30:09 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r3, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000002c0)={0xf000000, 0x0, 0x4, r2, 0x0, &(0x7f0000000280)={0x9c090b, 0xb, [], @ptr=0xf845}}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000300)=0x50, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r6 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @ethernet={0x6, @local}, @generic={0x21, "7f25449dc51269cfb7d3dd20d078"}, @nl=@unspec, 0x63b, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000000)='veth0_to_hsr\x00', 0x6, 0x6, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_subtree(r7, &(0x7f00000001c0)={[{0x0, 'rdma'}]}, 0x6) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000100)='cpu.stat\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0xc028660f, &(0x7f00000005c0)=0x400000000) close(r5) [ 196.265380][ T9047] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 20:30:09 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000001c0)=""/30) 20:30:09 executing program 3: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108280000000000000096000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b00000000"], 0x34}}, 0x0) [ 196.332324][ T5] usb 5-1: new high-speed USB device number 6 using dummy_hcd 20:30:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) syncfs(r0) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0203000313000000000000001200000005000600000000000a00000000000000fe8000000000c0000000000000000000000000000000000005000900ff0000000a00000000000000fe88000000080200070000000000020100000000000000000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000c53aecf4fb23f90abb7be7ca63ba19f120415e9ddaba7f68d26bdb68f2f0dc502607cb405a048b06c3fc3b360162a9ee3ba9b38fda9252d0ca0df15aefb82554b2622feed2272da8697c4749464dd4"], 0x98}}, 0x0) [ 196.570020][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:30:09 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f00000000c0)=""/42) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000080)={0x29, 0x4, 0x0, {0x6, 0x9, 0x1, 0x0, [0x0]}}, 0x29) r6 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$inet6(r1, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x11b0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="28005cc11d473badc74560f3e60000", @ANYRES16=r8, @ANYBLOB="010b0000000000000000000000001400020077673100"/34], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) fcntl$dupfd(r7, 0x406, r0) 20:30:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x40000, 0x0) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000000280)={0x4, "bc2aadb96e58b8e345223932770791c7df587cdfac398bf5dd55f6d5505bd8e2448804b145717f876cfcac56692e9d9ebe4c692a55f90696492528f5b2955ea0"}) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x400000, 0x0) fchdir(r6) ioctl$DRM_IOCTL_FREE_BUFS(r6, 0x4010641a, &(0x7f0000000300)={0x2, &(0x7f0000000140)=[0x80000000, 0x5]}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') ftruncate(0xffffffffffffffff, 0x48280) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000900)={0x10c, 0x0, 0x9, 0x401, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}]}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0x53, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40}, 0x2008804) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r7, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYRESHEX=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x4, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_JITTER64={0xc}]}}}]}, 0x60}}, 0x0) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x10b200, 0x0) [ 196.653202][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 20:30:09 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) [ 196.719000][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.732902][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.788470][ T9081] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 196.806405][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.860023][ T9081] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 196.880249][ T5] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 20:30:10 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r3, &(0x7f0000000480)={&(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)="78099fbd327a2a0836e6a3cc2d5f560dde10ea123b1fe0d2c0f1fcc2509b81161510b3eb1f49945eef1b58cf56d7dad9ec3400fcef9ed6c6d15564151e9d12417446b0dd1934928022d835997e28eceb3a77724166765417cf0972bbe23c98b4b284a0d9e68ba7b5613de84b00d662827165828ca04b27845fb00b351265d0a9e025e8eacdb7d0955dbc148d2c825779a1b02cf8f32163deaaffcbb93ca17ec0", 0xa0}, {&(0x7f0000000380)="7b8a95bac61a8a4de72aaa2a6cdb4c857450f3d66ee7cb73b9df50ef5fbade7f4d3a5a9ce0251c0c930897210d603430f6b1b74d315b49f2c90ce739a9a2068b8b7f50ac3b6a3e0c34a5868224ec053ed1ffca8fc3ee", 0x56}, {&(0x7f0000000280)="ee3f6f4229993639b66518d9bdd09e24b819fc3167352d5f65c436aa1140dbc894331db2ba1ca549bd93d7b0eac1465bce", 0x31}], 0x3, &(0x7f0000000440)=[@txtime={{0x18}}], 0x18}, 0x40004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(0x0, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="98efbe84119211ccfe0be0d9416b131f085a6a34c8fa0b3b5e490692e060a574d1d7a6c8425ef9e57ab39b06677e32517b1099023cd3d40b9afdbd9d8beb0d02996a4760ddf2a93f54fa2e134b85bf2df53c27502d65f9969c8630ca168f2ca3da894952a7fa50a037dae0cc9d243af4936d52d87b549621773a800000000000000000000000000000000000ec247f8dbdd9f6c203c9e03a209c504116a7d583117ae24e6b38bd77fb44ba69d79b286de807c649f8ec20f50e99333f3c9167aeb429b83cbd6adabd9cf4ac892a50ed8b7d5e0f2564dc0fc8"]) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010b0000000000000000000000001400020077673100"/34], 0x28}}, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x7, 0x3, 0x73, 0xc000, 0x100, r4, 0x2, [], 0x0, r5, 0x1, 0x0, 0x1}, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x48, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) symlinkat(&(0x7f0000000100)='./bus\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') [ 196.936804][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.017388][ T5] usb 5-1: config 0 descriptor?? [ 197.121984][ T29] audit: type=1804 audit(1593462610.188:16): pid=9104 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir786646777/syzkaller.cBwg1C/26/bus" dev="sda1" ino=15901 res=1 [ 197.265587][ T29] audit: type=1804 audit(1593462610.338:17): pid=9099 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir786646777/syzkaller.cBwg1C/26/bus" dev="sda1" ino=15901 res=1 [ 197.278999][ T9099] syz-executor.3 (9099) used greatest stack depth: 23776 bytes left [ 197.505004][ T9042] udc-core: couldn't find an available UDC or it's busy [ 197.513493][ T9042] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 197.530132][ T9042] input: syz0 as /devices/virtual/input/input6 [ 197.742546][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 197.748598][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 197.757705][ T5] usb 5-1: USB disconnect, device number 6 [ 198.432480][ T5] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 198.794744][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 198.805977][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1410, setting to 1024 [ 198.817495][ T5] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 198.827464][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.844101][ T5] usb 5-1: config 0 descriptor?? 20:30:12 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) r1 = memfd_create(&(0x7f0000000640)='\x00\x00\x00\x7f\xc9\xe9\x0e\xff\x8b\xe8\xd0\xb8\x80\xc7\xf5\xe2Z\x03\x00\x00\x00z\x9b\xb0\xe8t%\xfc\vw\x82\xdb\xf1^\xe8\xf8\xc1-9Q\x00\x04\x00\x00\x8b[\xaa\x91\xef\x7f@\xd2z\xb3T\x9e\xefn7%E\x00(\x1e\xd1P\x0f\x9f\xca\xff\xcf\xc9c\x97\xb3\x81\xa04\x03\x1b\xf5\xce\xfa\xdc\xf6\xf2\'\x83\x82\"#K\x02eU\xae\xd4P\xc0iH\xf2g\xc9}\xf4I\xb0}\x9er#y\x0e\xcb\xa3\x80\xb5q\x1c\xef0\xbd\x87\xe8\x8e\x88\xe6^\xdc\f\x1e\xd0\x97\xce\xdc\x13\xce\x8a\xb3\b\xee\xd8I\xbck\xec\x80\xfa\xce\x86\x85\"\x1d\xa2\xc2\x1d\xf0\xc3\x9cm\xcf\x8a\x00\x00\x00\xe31\xe6\xc3\xa5\xb1\x1c\r8%\x06\xc3c\xe0\x7f\x88W\x18u\xdcbl\xe5(\x97c\x1a\xfd\xe0\xfa\xc0\x97\xc8\x95\x82u\x82e\xf3\xe7e\xf59\xf9S2\xd1\x98\x81\x8f\xbfwr\x97\xee\a\x8a \x1c%o\xed\x9e\x11\xd1', 0x0) write$binfmt_elf64(r1, &(0x7f0000000e00)=ANY=[@ANYBLOB="7f454c4602000000000000000000060003003e000039a594249c1fd82feb9cf20000000000000000dfeb7bba00281293bd5d74dafc20380003"], 0x3c) execveat(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net\x00') r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x48280) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x4000) fchdir(r3) write$P9_RGETATTR(r2, &(0x7f0000000400)={0xa0, 0x19, 0x1, {0x0, {}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, 0xa0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') 20:30:12 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) write$binfmt_elf32(r0, &(0x7f00000009c0)=ANY=[], 0x654) socket$nl_xfrm(0x10, 0x3, 0x6) close(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x48280) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r4, r2}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {r4, 0x0, '?h;', "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"}}, 0x110) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0xa400295c) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)=0xb034) 20:30:12 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:12 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:12 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x11}}, 0x0, 0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000001000010800e444474652bab2eb000000", @ANYRES32=r4, @ANYBLOB="1300000000000000cc001a8018000a8014000700fe"], 0xec}}, 0x0) 20:30:12 executing program 3: socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000000c0)="0f20e06635000004000f22e06766c7442400007000006766c7442402050000006766c744240600000000670f0114240f0102e38336f09601dc660f38816bad0f01d566b9ae0b000066b80000000066ba000000800f30d9ed260f01c9", 0x5c}], 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) fchdir(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000140)={&(0x7f00000002c0)="d51cb85e1c083f92c9e5e40dae96029c95de85826b05c772b7ecd65b9b78aaefbd35ad5317a8560971e73afa5e169ef11812ded6019dc2f371ef48797ecd7c87d635c2c0b0aeb022f7709448c90f940851a622f07da59ad00c99e8af7c11814c57b56a0e2a37fbfe63be35ca05534b3b27b8730136", 0x75}) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000000)={0x7ff}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)={0xfff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 199.163553][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 199.173745][ T9150] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.0 proc:/self/fd/4' not defined. [ 199.179404][ T5] usbhid: probe of 5-1:0.0 failed with error -71 20:30:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x80, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r4, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000100)=@v2={0x2, @aes256, 0x10, [], "b3cb4c19d565ebf1cae0ccc23a25e5a6"}) chown(&(0x7f0000000000)='./control\x00', 0xee00, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000140)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 199.347611][ T5] usb 5-1: USB disconnect, device number 7 20:30:12 executing program 5: ioperm(0x0, 0x707, 0x8) clone3(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r2, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r3 = pidfd_getfd(r0, r1, 0x0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000000)={0x81, 0x3, 0xfffffffa, 0xe46, 0x8}) 20:30:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x48280) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x1, 0xa8, 0x80, 0x3, 0x0, 0x10000, 0x10002, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0x260}, 0x3400, 0x5, 0x400, 0x3, 0x3f, 0x0, 0xfffc}, r3, 0xf, r2, 0xa) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) recvfrom$inet(r0, &(0x7f0000000040)=""/6, 0xffffffffffffff1e, 0x300, 0x0, 0xfffffffffffffe3d) 20:30:12 executing program 2: unshare(0x2a000400) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) read$smackfs_logging(r0, &(0x7f0000000040), 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000000)=0xff) getsockopt$sock_buf(r3, 0x1, 0xc, 0x0, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r5, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0xffff, 0xad, r4, 0x0, &(0x7f0000000080)={0x396, 0x1ff, [], @value=0x9}}) ioctl$TCSETXF(r6, 0x5434, &(0x7f0000000180)={0x1, 0xff81, [0xc780, 0x400, 0x3, 0x6, 0x401], 0xccd}) 20:30:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x10000, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x800, 0xf, 0x1, "a0da69a70cd6aba2bdd286aa7c1664222016eb93d34b4eea20db35aab43287a9", 0x31363553}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000005200028008000100", @ANYRES32=0x0, @ANYBLOB="25000a0079b2913dd6636c6a89e0ca74fdbafe2a09c678bdcea2c68bbf55294ee6d8512aa4dd158da483a7da1274b1de97b509794cf20ab8fd5d146f5eef76ab82445c34a3127f39e1cf2c402a351f7a5905bd6f6af23332e11bc8dbdceb44", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) [ 199.655314][ T9180] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 199.729481][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:30:12 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x10100, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="6291210072"], 0x5) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x48280) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="4ab77d2a8edfe582196b9d840f28cdf2", 0x10) [ 199.812988][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 20:30:13 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r2, r0, r1) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:13 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0x3, 0x2) ioctl$FITHAW(r0, 0xc0045878) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 20:30:13 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0xa4, 0x12, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9, 0x9, {0x0, 0x0, [0x0, 0x4], [0x0, 0x0, 0xfff], 0x0, [0x7]}, 0x5, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x56, 0x1, "5a9837ed2b8e50213ecc41711d7fb92e16c45011e2bfd804bd479e8bab5dff7349cc0a4ae8e6f6594a66a9a14c13fcc2fe802a21dfdb2013d3a81bea88a694d3045c3c0f4ad46ccaba85d245f01908283381"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x88c5}, 0x4) r0 = socket$inet(0xa, 0x801, 0x84) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x48280) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r3, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0x9a0000, 0xc57, 0x3, r2, 0x0, &(0x7f00000000c0)={0x0, 0x6, [], @p_u8=&(0x7f0000000000)=0x3f}}) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{0x2, 0x4, 0x37, 0x8001}, {0x9, 0x1, 0x9, 0x4}, {0x3, 0x40, 0x81, 0x6}, {0x800, 0x8, 0x9, 0x7}, {0x6, 0x5, 0xb9}, {0x8000, 0x80, 0x5, 0x2}, {0xfa6b, 0x5f, 0xfb, 0x7ff}]}) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) semget$private(0x0, 0x4, 0x0) socket$inet(0xa, 0x801, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r6, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) lseek(r5, 0x100000000, 0x2) 20:30:13 executing program 5: syz_usb_connect(0x0, 0x35, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) [ 200.161245][ T9200] vivid-000: ================= START STATUS ================= [ 200.193078][ T9200] vivid-000: ================== END STATUS ================== [ 200.251862][ T9201] vivid-000: ================= START STATUS ================= [ 200.309334][ T9201] vivid-000: ================== END STATUS ================== 20:30:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) recvfrom$rose(r1, &(0x7f0000000080)=""/77, 0x4d, 0x20, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002000353b00000000000000000200000000000000000000000400180000000000"], 0x24}, 0x1, 0x10}, 0x0) 20:30:13 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x84000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in=@local, @in=@private}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000000c0)=0xe8) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000140), 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r4, 0x1) recvmsg(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/4083, 0xff3}], 0x1, 0x0, 0x0, 0x7115}, 0x100) 20:30:13 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r2, r0, r1) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0) [ 200.572544][ T5] usb 6-1: new high-speed USB device number 2 using dummy_hcd 20:30:13 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x6, 0xfffffffffffffffc}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x48280) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000040)={[0xf000, 0xf000, 0x1, 0x100000], 0x3, 0x2, 0x8}) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa02, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:30:13 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="06000000", @ANYRES16=r1, @ANYBLOB="010b0000000000000000000000001400020077673100"/34], 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x40080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r4, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x54, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)={0x6c, r6, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x2d, 0x2e}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}]}]}, 0x6c}}, 0x0) 20:30:13 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r5, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x5}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x492f}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8}]}}]}, 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 200.758446][ T9223] FAT-fs (loop2): bogus number of reserved sectors [ 200.798156][ T9228] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.817408][ T9223] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code 20:30:13 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r2, r0, r1) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0) [ 200.886458][ T9223] FAT-fs (loop2): Can't find a valid FAT filesystem [ 200.942623][ T5] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 32 [ 200.953213][ T9227] tipc: Started in network mode [ 200.957247][ T5] usb 6-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice=37.c4 [ 200.958437][ T9227] tipc: Own node identity , cluster identity 4711 [ 200.979006][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.007648][ T5] usb 6-1: config 0 descriptor?? [ 201.015635][ T9227] tipc: Failed to set node id, please configure manually [ 201.027607][ T9223] FAT-fs (loop2): bogus number of reserved sectors [ 201.038986][ T9223] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 201.049107][ T9227] tipc: Enabling of bearer rejected, failed to enable media [ 201.063495][ T9205] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 201.080050][ T9223] FAT-fs (loop2): Can't find a valid FAT filesystem [ 201.149931][ T9231] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:30:14 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000001c0)={0x14b, 0x3, &(0x7f00000002c0)}) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000180)={0x6, 0x32435750, 0x8, 0x5, 0x1, @stepwise={{0x0, 0x2}, {0x7fffffff, 0x100}, {0x1, 0x8}}}) ftruncate(r3, 0x48280) sendto$inet6(r3, &(0x7f0000000000)="8a56dd651a344e0a8f42f367e8ad9f60310635ec068e10b8d828ddbd0f9a48016667a69331c9b0675cdf4167f009fb4d9ef36d662d3eb4b53afb76de6a6ce5a7bc0fde9e78242bb96e7d559ab0f5cac9b5", 0x51, 0x4000010, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, [], 0x1}, 0xd9}, 0x1c) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="d09a", 0x2}], 0x1}, 0x0) [ 201.293442][ T2479] usb 6-1: USB disconnect, device number 2 20:30:14 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) r1 = getpgrp(r0) ptrace$getenv(0x4201, r1, 0x3ff, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x28000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3d906f5e5225c964855c3b3a09bd2293", 0x11}], 0xcb03, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 20:30:14 executing program 3: unshare(0x600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010b000000000000000000000000140002007767310000000000edffffffffffffff"], 0x28}}, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xffffffffffffffff) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r5, 0x48280) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x20000008) r6 = socket(0x3, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x25, 0x0, 0x0) 20:30:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b3e1b40000000000109020709010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x0, 0x404280) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="8f0180"], 0x0}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) [ 201.878729][ T17] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 202.072574][ T5] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 202.242685][ T17] usb 3-1: config index 0 descriptor too short (expected 2311, got 36) [ 202.269246][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.289461][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.308490][ T17] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.40 [ 202.321004][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.337778][ T17] usb 3-1: config 0 descriptor?? [ 202.442607][ T5] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 32 [ 202.462535][ T5] usb 6-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice=37.c4 [ 202.496920][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.525560][ T5] usb 6-1: config 0 descriptor?? [ 202.558835][ T9205] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 202.786091][ T5] usb 6-1: USB disconnect, device number 3 20:30:15 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000100", @ANYRES32=0x0, @ANYBLOB="10000200000000002000000100000000"], 0x2c, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) 20:30:15 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:16 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000001c0012800900010062395a875ecbe7fd66312c6f6e6400000000385f800908001200ff000000000000"], 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r3, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000080) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 202.889111][ T17] usbhid 3-1:0.0: can't add hid device: -71 [ 202.897314][ T17] usbhid: probe of 3-1:0.0 failed with error -71 [ 202.933792][ T17] usb 3-1: USB disconnect, device number 2 [ 202.996258][ T9355] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.080275][ T9355] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 20:30:16 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:16 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x48080) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000200000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r5, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="b40000002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f2ff00000800010075333200880002008400050000000700000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000eb00"/156], 0xb4}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 203.480775][ T9370] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 203.573319][ T17] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 203.588421][ T9372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 20:30:16 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000140)={0x3, 0x7f, 0x0, 'queue0\x00', 0x2}) 20:30:16 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x1a2, 0x0) [ 204.003826][ T17] usb 3-1: config index 0 descriptor too short (expected 2311, got 36) [ 204.012165][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.089486][ T17] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 20:30:17 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) [ 204.149716][ T17] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.40 [ 204.175687][ T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.187238][ T17] usb 3-1: config 0 descriptor?? 20:30:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1c) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x2, &(0x7f00000000c0)=[0x0, r5]) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x1c000000000, 0xc, &(0x7f00000019c0)=[{&(0x7f00000000c0)="e577ad9eecac7a98970a45e8863f47fb53394c265390c85a558891b858d38a37c488f4a88facafc2fa1d05293abf1a67fe96d14da863133e1a4fccf1b4a31bf7c430e18932c245da3132a26150bed2bc470420dffe0c6387aab4ef9f98e4", 0x5e, 0x5}, {&(0x7f0000000180)="c0a706fad61eb6dd83520458e6ccecf9a47e7f23cc2e1409b2a836428cf19fda37de", 0x22, 0x5}, {&(0x7f00000001c0)="6e7d7ecbe09d3b8e", 0x8, 0x80}, {&(0x7f0000000200)="779f8afc8c2130e87e80c3e0c7c40c43bec897352c34a63e9f2c6f79d8f91b31623e25933358d35507ee689b981b17a1c23fb89f4369a1e11f1747658431bfde5714ec395d023160ffaeab10b0", 0x4d}, {&(0x7f0000000380)="0dd08dc0b2999980e17fe93a047729cf49accb9c39aa37a83525fb68932a035baf0b849dc1e76fd609ffaf969b19d264f58195b3ad267280a41dfa4a00c364a7011263105d63e62cec2e1ec82e5720701c1c48d1f76b9e39330fba534d1cab179fa0e00d23e253b53f9fd522d43278ac96ba8fef531bd462cdc020fccfae73fdb5a0ed971884ce08489e581fb053dd53bd8f91f18281fbcdf64e432001ee66ae5f6c918a67ae9a59784b90e4322f12dd00b706f6e3f9575fbd4fac8dd0331ad01485a1fa5c7a14", 0xc7, 0x8000}, {&(0x7f0000000480)="3aa97f497e4e589e01e87d63e19559504c1862d29b26a3e4e0a199d25dd9111d966b98f342bd1ad91b122ac83f858e4a60fbbf5b4e32b2cb3f8a0cfae136ddd96c821a1b9c5b0e30d9c0a2e2dd9404730c7ddfb86acda43cb03ebfd5a4c4c6ff3fc9a1a0acb6f048a7947d3cf9803ede8312ef3c61e7c678ed58fbc1643c233bea1ba705577b8b1ce1a6057d861c4d421e5ad07217cc89bb293b0951ded27148576d9fcbfbbb98c31939771869cbd9f5869a295b2058", 0xb6, 0xbed}, {&(0x7f0000000280)="a96563", 0x3, 0x9}, {&(0x7f0000000540)="0657b581a085b7d0ceac404f72af7011460751e3789870a547c2bd0a0fea184a07d7e9520f11e9643fb0abd399ef441b12fbf895893d90bb8b9cd17b30f129ed3d927a2a7a505ab829a216ad636150a91ebff0d33534872b5e04e776244eed4f1e17", 0x62, 0xfffffffffffffffe}, {&(0x7f00000005c0)="9f9bdbd8fa698aca533c11b07a497a3f1f2efa76d88348d59117631180ab22478b1633084b0b23e00870c75d466285cd210665e0dda101085a3ff020912ac7abc4a27db1fdbddb26dc75bfe9f8d8ec06a7d1140105f7e9212ff91e885baaa2599f1606fecd2c595e479ce7153586c574b38986089643bf00c9ce576ba348b6fb5f8740d4d9a41d35432d854e4dd112c30bea65794b30a2f8a9e86a58160d75c04b9b4a9a38e62a34aed6", 0xaa, 0x9}, {&(0x7f00000002c0)="df88a5be2a659324fdfa173950b36aa511bf4e89ed6ddc", 0x17, 0x4}, {&(0x7f0000000900)="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", 0x1000, 0x100000001}, {&(0x7f0000001900)="c3feabc57ae7b8c58295d07ce4dd2be5708e865c61ef4712484206039808372918006d413d11dc461a8a658ede1619d0539bf34457f9a38afea9a87823d4d3f0dfefc1c3bebfcc0ea7946af884ec0c8da25c7a0ecfbc608ad5d583711419f064efda34c2779c051848517e1d5c8bd80f5cb666b75513cadc05ed92b209c2637e381d60276ecf7a2fe66d9cd595ff877f60af15e12ebf7f99da2d56ca8943a2be6196e4ce25700df75779c6201b3691593ea73da0f8cba4a5aab45116c1c45c", 0xbf, 0x80000000}], 0x2141000, &(0x7f0000000680)={[{@gid={'gid', 0x3d, r5}}, {@type={'type', 0x3d, "a9ac2411"}}, {@codepage={'codepage', 0x3d, 'cp860'}}, {@quiet='quiet'}, {@uid={'uid', 0x3d, r7}}], [{@euid_gt={'euid>', r3}}, {@seclabel='seclabel'}, {@fsmagic={'fsmagic', 0x3d, 0x4b}}, {@permit_directio='permit_directio'}, {@hash='hash'}, {@obj_role={'obj_role', 0x3d, 'type'}}, {@pcr={'pcr', 0x3d, 0x2}}]}) setpriority(0x2, r1, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="e47761c3bf8c"}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x58}}, 0x0) 20:30:17 executing program 4: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000000)=[{}, {0x2, 0xfffa}], 0x2) semop(r0, &(0x7f0000000080)=[{0x2, 0xd}], 0x1) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000040)=""/222) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000280)={0x38, 0x3b, 0x15, 0x16, 0x9, 0x7, 0x5, 0x1b}) ftruncate(r1, 0x48280) recvfrom$l2tp(r1, &(0x7f0000000140)=""/158, 0x9e, 0x6000, &(0x7f0000000200), 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3}, 0x78) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r5, 0x48280) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000000240)=@raw=[@generic={0x1, 0x0, 0x6, 0x3b5, 0x3}, @map={0x18, 0x8, 0x1, 0x0, r5}], &(0x7f0000000300)='syzkaller\x00', 0x1ff, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x0, 0x5}, 0x10, r4}, 0x78) 20:30:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e27, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000056, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @broadcast, 0x0, 0x0, 'lblcr\x00'}, {@empty}}, 0x44) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) write$9p(r2, &(0x7f0000000180)="b22969634e262d11f2aa4b265300c42deac66d3a06441b8635d39f05318dde1bae34bf8048dd11a11b2aaf33a39ef3abea6ca3c7706f599c6145f7ca8cc671d0ef2c81c227fabade110aef8a1fbb5b8019034e7f93458b1bdd3ed8f9a6f15aaa110fa52be1f0964fcd6ea74e6d31accb91e10c4a444d0f95831169", 0x7b) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1c542) ioprio_set$pid(0x3, 0x0, 0x87ae8b1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) [ 204.543475][ T17] usbhid 3-1:0.0: can't add hid device: -71 [ 204.549641][ T17] usbhid: probe of 3-1:0.0 failed with error -71 [ 204.619753][ T17] usb 3-1: USB disconnect, device number 3 20:30:17 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x41c1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = gettid() tkill(r0, 0x33) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0xc4000) io_setup(0x202, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) io_getevents(r2, 0x3, 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000780)={0x7}, 0x7) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x48280) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x80202) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) 20:30:17 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000800)=ANY=[], 0xa) close(r4) socket(0x10, 0x3, 0x6) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in=@multicast2, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, r6}]}, 0x140}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMBIC(r7, 0x5417, &(0x7f0000000300)=0x5) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) 20:30:17 executing program 2: r0 = socket$kcm(0x2b, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000028000507d25a80648c63940d0824fc60100003400a600200053582c137153e370400018003001700d1bd", 0x2e}], 0x1}, 0x0) 20:30:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x41bd, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x4000, 0x0, 0x0, 0x0, 0x2a25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0xfd, 0x0, 0xfe, 0x0, 0x39, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x4, @perf_config_ext={0x1, 0x9}, 0x40402, 0x0, 0x1, 0x8}, 0x0, 0xd, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') mkdir(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r2, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020028bd7000fedbdf250600000008000700e0000002150001e5c370729b632f706172747c8d7e0fdee2e95dfef1a2f1494b6974696f6e7300000000080002000700000006000b0029009e818b98588dd69e1d92bbec237f64a2d992306965"], 0x44}, 0x1, 0x0, 0x0, 0x20040050}, 0x4081) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r5, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r6 = dup3(0xffffffffffffffff, r4, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)='NLBL_MGMT\x00', 0x0, r6) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008084}, 0x8004) rename(&(0x7f0000000140)='./bus/file1\x00', &(0x7f0000000100)='./file0\x00') [ 204.893368][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.015538][ T9430] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.047356][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:30:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5, @ANYBLOB="c30656db133255aacafaa7faf45766d9659411e11edbb1b54d2dddd9bb2145fce09c15c95123055bf95fe61acbfb81525d89f7e5a0c54faaa0219e94b6f1a7f8eb7ea8ba0e07a6e6f7a522e358adb1d950ca17541d721e62ddc459ebcc438cb151b3e49b152a66b5cb85edc21f73a9e75946d2cdcb916021c4d8071ca6891b0b3aa8b138bd36e557227c2db73ed7b7c922b66a4003f01e880cd1d2f15b448b8f70d7dfd3510a5e64868f7565b945f723a13a66c7f87db8082625"], 0x40}}, 0x0) 20:30:18 executing program 2: socket$kcm(0x10, 0x2, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="0200000000000000040f15ecdb4cb92e0a480e002a000000e8bd6efb25030900cedc57b5240248ff050005001201", 0x2e}], 0x1}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x48280) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1410, 0x100, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000880}, 0xc000) 20:30:18 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:18 executing program 4: perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0x10000000) creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f00000002c0)={0x101, "caf70b6ae896d3e70f7f9686071c1f7cdd00b7d79a84f0c7df64b4a83ae1795cbcc85328d8dcf8147cea93c822cbdce4be5f20d69184a27b41a4c03a58babca253809f55e1dba48c9d847501d7cd561a068e122cecca111678831683d4c53855161dbc98608e6ea3e3239a00420e0507155c07a9a0c9118a698a2c6bcf4ede02d5e2bff18b2e2d6875dd7391d7b2956c78e8e8a848753c7cd03052955e5d348842aefef5b993378b2d4858da2536a2d110f5c3f6aa5bae9f780091509ee5a3fe4712e00b7b882c4613062d36b3126eb26a945f421c860c3a71bbbdea34e948460ba146eee9899b9cfab000926f404ab4f297f65a9f9a86812b499d8abbf20996"}) dup2(r0, r1) [ 205.389593][ T29] audit: type=1804 audit(1593462618.458:18): pid=9454 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir461578643/syzkaller.p5ATw3/33/file0" dev="sda1" ino=15929 res=1 20:30:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x48280) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000080)=0x9) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4000009c}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x48280) write$midi(r4, &(0x7f0000000040)="75722262e2a602f61ed6412b7e22d86a84184344", 0x14) [ 205.509739][ T29] audit: type=1804 audit(1593462618.528:19): pid=9454 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir461578643/syzkaller.p5ATw3/33/file0" dev="sda1" ino=15929 res=1 20:30:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x48280) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000200)) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@loopback}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@private1}}]}, 0x154}}, 0x0) 20:30:18 executing program 0: open(&(0x7f00000002c0)='./file0\x00', 0x1100001a1043, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) 20:30:18 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:18 executing program 2: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000000)='l\x89\x12@\x87\xe5\xcfwb\xa9\xc8N\xdc\r\x00\x01\x00\x00\x00\x01\x00\x00\x00\x00\xd2\xc4\x83\xd6\x9c\xab\x1de|\xee\xa5\xe9\x83\x8e\x00\x00\x00\xf7\xa6\xc1\xef\xb8\xdd\xa3\x83\xdc\x0f\x03\x0e\x97$') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00y.\xfc*_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7f\r\xb2\xcf\x8a\xc9(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0-\x96\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:19 executing program 2: socket$inet(0x2, 0x80001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r4, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r5, 0x48280) r6 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r6, 0x48280) r7 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r7, 0x48280) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) ftruncate(0xffffffffffffffff, 0x48280) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x7, @remote, 0xcc}, {0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, [], 0x1}, 0x80000001}, 0xb529, [0x9a, 0x1, 0x4, 0x2, 0x3f6834bc, 0x3ff, 0x749]}, 0x5c) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 20:30:19 executing program 0: perf_event_open(&(0x7f0000000b00)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r3, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) splice(r1, &(0x7f0000000100)=0x1, r2, &(0x7f00000001c0)=0x3ff, 0x800, 0xc) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='security.evm\x00', &(0x7f00000002c0)=@v2={0x3}, 0x9, 0x0) 20:30:19 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000080)='.\x00', 0x31e, 0x8, &(0x7f00000007c0)=[{&(0x7f0000000140)="33bb1854fabba893db05e506e18ebf144f24ee059aa3", 0x16}, {&(0x7f0000000180)="e0a8124baa6921296c20d088156b2c1e1f13dec696f3a4", 0x17, 0x65d}, {&(0x7f00000002c0)="38a4cbc744e11376e12a76dab34823835cb408e7583c47835d251fc7370feb1f932c1717db682e5d7510a8a00aa92b218556130b7fa3462ba86451a138343a10d53be55f98be40d3f686ea2c875c0946d2211da046dd5379b769dc5e1734866de41ce3afc03c0aefdbe907cd277eba07e087a575db5576d702f6cb6b3329ee1ba498dfed8d5129f2db0d84e2f0760c412367b5e48a10448f7d8df1d22be81bc2a3fd85a277d9d80d2de8299148147a364efba79fec4d5d2c842151e85ac1f2a6943920d20e5b1c61e8734a3b2d40ccf7", 0xd0, 0x80}, {&(0x7f00000003c0)="545cda2fe8a1a4576abc40aa91bf974d2ed0d4eee6d1297b5efb1d1e5da84ba90b08de79d2e81964e51a4132d270144d27978b60914f6d12742296e2bd0eeb7a66b67474fc2310bf0a66daccb8455302e726f78265b86c436140afb6b998f87c14636310d685afe9744eba9877a296bc5a7366c37a579df877e5ed86c1558a791199d2ec42cb9ce3cd7dea5637ab0322968af4140e7f9375f32ef0453936273ee172ba", 0xa3, 0x7}, {&(0x7f00000004c0)="a3335eea344e1a44cfcebb135a5dbe462f6e0d4a8a5c67da2d88fb5b5f5c770d60898fdb992f57d3f4965edfe4f43bdbd18c03bac6f02ee75570ad4e45dc696ff8330fdd6bf4932ecd58aae493c288394b72e56c0ca85099808f30f7f152cdbe9f7bbef8060ab47630f2bf028fb931c0", 0x70}, {&(0x7f0000000540)="737ca67b9fbb3261323b752fbbaa2c99c4c32e3c95d4340e54d9697c3c746c24b0dda882282ac81c518b51e9f15f6c980333107234ae0f017df345b4b56c8248b69a45607f8e0ca9d1e026b8c80429ce902ef6988db00b425fb90c2a9eec4c3c7ca44b8f41c43f2ace993837b5efeb4c1b10c52751ebb4d6269dba0828415dc104002d12bf8c0b09597396ab38e6827d640b1d36ea6d68f046798993999fbc7d0308cbe895421edeeeafe140114794628a92412d817917543edd0993030bb5eb281dccc301d8ea9c0e96f395b0f7", 0xce, 0x1000}, {&(0x7f0000000640)="4a4ea9e6e061bffe62f747c6892ba276c79d9cd7481a2c3389f69b721a5808b248afc04e7594fb86a2180d81a68c3fd3380d56a47027d47e4fe2edb2f476475a1eae9067fa500d93865bb669c375b5a74369703b51ef87af99657cd485593eb02b3c33eaf43e4e3a9c80a5d867ddf1eeba923d8a93e28640702e87c3c1bf7aab2a077a2bcfc4d0e3a3a078485a7da8f13d14d0cd59523578adcecb115d03635a22e8dc85b29d6c6460493f208532b7c5808e6cf1bcf04e39e027bd6c7074003cc1c3f26c13bf9b4a9254e9bb06ab39270167e81046ee0d0580f75ba5c45f7b", 0xdf, 0x7}, {&(0x7f0000000740)="aa1a81a4552e25fafe646e8be9e12b298d00caf9a8b141b72fc930d544be327722b2dc0a84bd0f8b3d2512a938de35faa68fcc1d0aa1234871d1e4d4e82733aff55abb8552face9166693cd88a597dcd67", 0x51, 0x7fff}], 0x40800, &(0x7f0000000880)={[{@umask={'umask', 0x3d, 0x7fff}}], [{@euid_lt={'euid<', r2}}, {@subj_type={'subj_type', 0x3d, 'dctcp\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x8}}]}) sendto$inet(r0, &(0x7f00000001c0)="0c288a927f1b50c25e2bc4637ffa7864ac5cf65ac618ded8974895abeaf4b4834ff922b3f1a03059bcecc7a95425a3a17e758044ab0900f7ae55d88fecf95d1a7511bf746bec66ba861bc0296d156699a72135bcabe10f34022433d3", 0xfe6a, 0x20044050, 0x0, 0xd) 20:30:19 executing program 5: chdir(&(0x7f0000000240)='./file0\x00') socket$kcm(0x10, 0x2, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x34}], 0x1}, 0x80) syz_genetlink_get_family_id$smc(&(0x7f00000001c0)='SMC_PNETID\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)}, {0x0}], 0x2, &(0x7f0000000580)}, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r3, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r5, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r5, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x32d6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2500000010008108040f80ecdb4cb92e0a4804000d00000009020e00010040d5ae7d0200ff", 0x25}], 0x1, 0x0, 0x0, 0xe}, 0x0) 20:30:19 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) [ 206.616147][ T9516] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.5'. [ 206.650523][ T9521] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.5'. 20:30:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010b001d000000000000000000001400020077673100000000000000000020000000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r3, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x101040, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f00000003c0)={'broute\x00', 0x0, 0x3, 0x17, [], 0x2, &(0x7f0000000300)=[{}, {}], &(0x7f0000000380)=""/23}, &(0x7f0000000440)=0x78) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x20000}, 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac141433e000000162079f4b4d2f87e5feca6aab840413f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x5ee, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac141433e000000162079f4b4d2f87e5feca6aab840213f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) 20:30:19 executing program 5: chdir(&(0x7f0000000240)='./file0\x00') socket$kcm(0x10, 0x2, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x34}], 0x1}, 0x80) syz_genetlink_get_family_id$smc(&(0x7f00000001c0)='SMC_PNETID\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)}, {0x0}], 0x2, &(0x7f0000000580)}, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r3, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r5, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r5, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x32d6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2500000010008108040f80ecdb4cb92e0a4804000d00000009020e00010040d5ae7d0200ff", 0x25}], 0x1, 0x0, 0x0, 0xe}, 0x0) 20:30:19 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x779b}, 0x0, 0x7, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind(0xffffffffffffffff, &(0x7f0000000280)=@generic={0x21, "e1ff000000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0241bbbaa75f2e3ff5f163ee340b767950080000000000101013c5811039e15775027ecce66fd792bbffd5bf5ff1b0816f335001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0xffffffffffffffbc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab06a6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) [ 206.838640][ T9529] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.5'. 20:30:20 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:20 executing program 5: chdir(&(0x7f0000000240)='./file0\x00') socket$kcm(0x10, 0x2, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x34}], 0x1}, 0x80) syz_genetlink_get_family_id$smc(&(0x7f00000001c0)='SMC_PNETID\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)}, {0x0}], 0x2, &(0x7f0000000580)}, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r3, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r5, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r5, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x32d6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2500000010008108040f80ecdb4cb92e0a4804000d00000009020e00010040d5ae7d0200ff", 0x25}], 0x1, 0x0, 0x0, 0xe}, 0x0) 20:30:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x41d1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3ad6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000100)) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0), 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) 20:30:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x2, &(0x7f00000000c0)=[0x0, r4]) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0x78, 0x97abf4ae85d698b6, 0x6, {0x1, 0x3, 0x0, {0x6, 0x6, 0x2, 0xffffffffffffffff, 0x3, 0x57f, 0x725, 0xd5, 0x6, 0x8, 0x6, r2, r4, 0x5, 0x7}}}, 0x78) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x40, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r5}}, 0x20}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@loopback, 0x4e24, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x6, r5, r7}, {0x2, 0x7cf2, 0x7ff, 0x1, 0x7fffffff, 0xce, 0x1, 0x81}, {0x7, 0x1, 0x2, 0xff}, 0xc5, 0x6e6bbe, 0x2, 0x1, 0x3, 0x1}, {{@in6=@private2, 0x4d3, 0xff}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3504, 0x0, 0x3, 0x65, 0x8, 0x3, 0x4}}, 0xe8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x2}, 0x8) 20:30:20 executing program 2: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) r2 = socket(0xa, 0x3, 0x84) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/84) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x19406, 0x0) 20:30:20 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) [ 207.487268][ T9544] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.5'. 20:30:20 executing program 5: chdir(&(0x7f0000000240)='./file0\x00') socket$kcm(0x10, 0x2, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x34}], 0x1}, 0x80) syz_genetlink_get_family_id$smc(&(0x7f00000001c0)='SMC_PNETID\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)}, {0x0}], 0x2, &(0x7f0000000580)}, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r3, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r5, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r5, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x32d6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2500000010008108040f80ecdb4cb92e0a4804000d00000009020e00010040d5ae7d0200ff", 0x25}], 0x1, 0x0, 0x0, 0xe}, 0x0) 20:30:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() recvfrom(r0, 0x0, 0x0, 0x18167, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3) wait4(0x0, 0x0, 0x0, 0x0) [ 207.752169][ T9559] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.5'. 20:30:21 executing program 5: chdir(&(0x7f0000000240)='./file0\x00') socket$kcm(0x10, 0x2, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x34}], 0x1}, 0x80) syz_genetlink_get_family_id$smc(&(0x7f00000001c0)='SMC_PNETID\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)}, {0x0}], 0x2, &(0x7f0000000580)}, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r2, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r4, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x32d6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 20:30:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r3, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000008500000085000000060000000500000001000006040000000d00000008000000030000000500000f01e4ffff04000000cb9b0000a7bd0000020000000000000008000000030000000200000040000000030000000800000000010000020000007a8a000006000000610f00000000000002030000000c00000000000001000000004e006c060f0000000000000b0000000000000000303e610000"], &(0x7f0000000340)=""/48, 0xa6, 0x30}, 0x20) r4 = open(&(0x7f0000000440)='./file0\x00', 0x402600, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, &(0x7f00000003c0)={0x10000, 0x3, 0x80000001, 0x9}) fchdir(r4) ioctl$HIDIOCGPHYS(r4, 0x80404812, &(0x7f0000000180)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0xfff, 0x2, 0x6, 0x75f98e44}) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x4000) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000400)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c001d00010000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 20:30:21 executing program 5: chdir(&(0x7f0000000240)='./file0\x00') socket$kcm(0x10, 0x2, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x34}], 0x1}, 0x80) syz_genetlink_get_family_id$smc(&(0x7f00000001c0)='SMC_PNETID\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)}, {0x0}], 0x2, &(0x7f0000000580)}, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r2, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r4, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x32d6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 20:30:21 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) 20:30:21 executing program 5: chdir(&(0x7f0000000240)='./file0\x00') socket$kcm(0x10, 0x2, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x34}], 0x1}, 0x80) syz_genetlink_get_family_id$smc(&(0x7f00000001c0)='SMC_PNETID\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)}, {0x0}], 0x2, &(0x7f0000000580)}, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r2, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r4, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x32d6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 20:30:21 executing program 2: chdir(&(0x7f0000000240)='./file0\x00') socket$kcm(0x10, 0x2, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x34}], 0x1}, 0x80) syz_genetlink_get_family_id$smc(&(0x7f00000001c0)='SMC_PNETID\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)}, {0x0}], 0x2, &(0x7f0000000580)}, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r2, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r4, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x32d6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 20:30:21 executing program 5: chdir(&(0x7f0000000240)='./file0\x00') socket$kcm(0x10, 0x2, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x34}], 0x1}, 0x80) syz_genetlink_get_family_id$smc(&(0x7f00000001c0)='SMC_PNETID\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)}, {0x0}], 0x2, &(0x7f0000000580)}, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r2, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x6c}, 0x0) 20:30:21 executing program 2: chdir(&(0x7f0000000240)='./file0\x00') socket$kcm(0x10, 0x2, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x34}], 0x1}, 0x80) syz_genetlink_get_family_id$smc(&(0x7f00000001c0)='SMC_PNETID\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)}, {0x0}], 0x2, &(0x7f0000000580)}, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r2, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r4, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x32d6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 20:30:21 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x202002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r3, r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0) [ 208.750074][ T9570] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 208.950063][ T9590] ================================================================== [ 208.958630][ T9590] BUG: KASAN: use-after-free in strnlen+0x63/0x80 [ 208.965055][ T9590] Read of size 1 at addr ffff8880a8583418 by task syz-executor.2/9590 [ 208.973198][ T9590] [ 208.975557][ T9590] CPU: 1 PID: 9590 Comm: syz-executor.2 Not tainted 5.8.0-rc2-syzkaller #0 [ 208.984396][ T9590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.994452][ T9590] Call Trace: [ 208.997771][ T9590] dump_stack+0x1f0/0x31e [ 209.002290][ T9590] print_address_description+0x66/0x5a0 [ 209.008191][ T9590] ? vprintk_emit+0x342/0x3c0 [ 209.012968][ T9590] ? printk+0x62/0x83 [ 209.016958][ T9590] ? vprintk_emit+0x339/0x3c0 [ 209.021645][ T9590] kasan_report+0x132/0x1d0 [ 209.026252][ T9590] ? strnlen+0x63/0x80 [ 209.030420][ T9590] strnlen+0x63/0x80 [ 209.034320][ T9590] dev_get_by_name+0x9b/0x2a0 [ 209.039883][ T9590] wg_get_device_start+0x1fb/0x2d0 [ 209.045005][ T9590] genl_start+0x390/0x570 [ 209.049344][ T9590] __netlink_dump_start+0x3d2/0x700 [ 209.054559][ T9590] genl_rcv_msg+0xb03/0xe00 [ 209.059250][ T9590] ? genl_rcv_msg+0xe00/0xe00 [ 209.064022][ T9590] ? genl_start+0x570/0x570 [ 209.068527][ T9590] ? genl_lock_dumpit+0xa0/0xa0 [ 209.073387][ T9590] netlink_rcv_skb+0x190/0x3a0 [ 209.078144][ T9590] ? genl_unbind+0x270/0x270 [ 209.082752][ T9590] genl_rcv+0x24/0x40 [ 209.086736][ T9590] netlink_unicast+0x786/0x940 [ 209.091689][ T9590] netlink_sendmsg+0xa57/0xd70 [ 209.096468][ T9590] ? netlink_getsockopt+0x9e0/0x9e0 [ 209.101757][ T9590] ____sys_sendmsg+0x519/0x800 [ 209.106533][ T9590] ? import_iovec+0x12a/0x2c0 [ 209.111224][ T9590] __sys_sendmsg+0x2b1/0x360 [ 209.115831][ T9590] ? kvm_sched_clock_read+0x15/0x40 [ 209.121040][ T9590] ? debug_smp_processor_id+0x5/0x20 [ 209.126340][ T9590] ? check_preemption_disabled+0xb0/0x240 [ 209.132073][ T9590] ? debug_smp_processor_id+0x5/0x20 [ 209.137381][ T9590] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 209.143552][ T9590] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 209.149641][ T9590] ? trace_hardirqs_on+0x30/0x80 [ 209.155201][ T9590] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 209.161294][ T9590] do_syscall_64+0x73/0xe0 [ 209.165812][ T9590] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 209.171707][ T9590] RIP: 0033:0x45cb19 [ 209.175608][ T9590] Code: Bad RIP value. [ 209.179722][ T9590] RSP: 002b:00007f0614946c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.188174][ T9590] RAX: ffffffffffffffda RBX: 00000000005021c0 RCX: 000000000045cb19 [ 209.196154][ T9590] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000007 [ 209.204220][ T9590] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 209.212199][ T9590] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 209.220199][ T9590] R13: 0000000000000a2f R14: 00000000004cd159 R15: 00007f06149476d4 [ 209.228358][ T9590] [ 209.230707][ T9590] Allocated by task 9592: [ 209.235398][ T9590] __kasan_kmalloc+0x103/0x140 [ 209.240256][ T9590] __alloc_skb+0xde/0x4f0 [ 209.244601][ T9590] netlink_sendmsg+0x7b2/0xd70 [ 209.249373][ T9590] ____sys_sendmsg+0x519/0x800 [ 209.254846][ T9590] __sys_sendmsg+0x2b1/0x360 [ 209.259445][ T9590] do_syscall_64+0x73/0xe0 [ 209.263954][ T9590] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 209.270107][ T9590] [ 209.272433][ T9590] Freed by task 9592: [ 209.276419][ T9590] __kasan_slab_free+0x114/0x170 [ 209.281358][ T9590] kfree+0x10a/0x220 [ 209.285289][ T9590] __kfree_skb+0x56/0x1c0 [ 209.289629][ T9590] netlink_unicast+0x78e/0x940 [ 209.294402][ T9590] netlink_sendmsg+0xa57/0xd70 [ 209.299279][ T9590] ____sys_sendmsg+0x519/0x800 [ 209.304102][ T9590] __sys_sendmsg+0x2b1/0x360 [ 209.308726][ T9590] do_syscall_64+0x73/0xe0 [ 209.313163][ T9590] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 209.319063][ T9590] [ 209.321397][ T9590] The buggy address belongs to the object at ffff8880a8583400 [ 209.321397][ T9590] which belongs to the cache kmalloc-512 of size 512 [ 209.335458][ T9590] The buggy address is located 24 bytes inside of [ 209.335458][ T9590] 512-byte region [ffff8880a8583400, ffff8880a8583600) [ 209.348659][ T9590] The buggy address belongs to the page: [ 209.354299][ T9590] page:ffffea0002a160c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 209.363410][ T9590] flags: 0xfffe0000000200(slab) [ 209.368267][ T9590] raw: 00fffe0000000200 ffffea00024bc748 ffffea00024e4348 ffff8880aa400a80 [ 209.377289][ T9590] raw: 0000000000000000 ffff8880a8583000 0000000100000004 0000000000000000 [ 209.385869][ T9590] page dumped because: kasan: bad access detected [ 209.392278][ T9590] [ 209.394628][ T9590] Memory state around the buggy address: [ 209.400260][ T9590] ffff8880a8583300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 209.409020][ T9590] ffff8880a8583380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 209.417194][ T9590] >ffff8880a8583400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.426573][ T9590] ^ [ 209.432129][ T9590] ffff8880a8583480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.440461][ T9590] ffff8880a8583500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 20:30:22 executing program 3: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgctl$IPC_SET(0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r4, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020028bd7000fedbdf250600000008000700e0000002150001e5c370729b632f706172747c8d7e0fdee2e95dfef1a2f1494b6974696f6e7300000000080002000700000006000b0029009e818b98588dd69e1d92bbec237f64a2d992306965"], 0x44}, 0x1, 0x0, 0x0, 0x20040050}, 0x4081) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x4c, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040040) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000005601b97405b27fa4f1b797aba123755b5ba2d8d5ebfb88d607004404f72cfeea"], 0x0, 0x0) [ 209.449130][ T9590] ================================================================== [ 209.457190][ T9590] Disabling lock debugging due to kernel taint [ 209.488854][ T9590] Kernel panic - not syncing: panic_on_warn set ... [ 209.495664][ T9590] CPU: 1 PID: 9590 Comm: syz-executor.2 Tainted: G B 5.8.0-rc2-syzkaller #0 [ 209.505737][ T9590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.515959][ T9590] Call Trace: [ 209.519257][ T9590] dump_stack+0x1f0/0x31e [ 209.523588][ T9590] panic+0x264/0x7a0 [ 209.527487][ T9590] ? trace_hardirqs_on+0x30/0x80 [ 209.532438][ T9590] kasan_report+0x1c9/0x1d0 [ 209.536962][ T9590] ? strnlen+0x63/0x80 [ 209.541082][ T9590] strnlen+0x63/0x80 [ 209.544981][ T9590] dev_get_by_name+0x9b/0x2a0 [ 209.550152][ T9590] wg_get_device_start+0x1fb/0x2d0 [ 209.555728][ T9590] genl_start+0x390/0x570 [ 209.560063][ T9590] __netlink_dump_start+0x3d2/0x700 [ 209.565294][ T9590] genl_rcv_msg+0xb03/0xe00 [ 209.569822][ T9590] ? genl_rcv_msg+0xe00/0xe00 [ 209.574491][ T9590] ? genl_start+0x570/0x570 [ 209.578999][ T9590] ? genl_lock_dumpit+0xa0/0xa0 [ 209.583853][ T9590] netlink_rcv_skb+0x190/0x3a0 [ 209.589009][ T9590] ? genl_unbind+0x270/0x270 [ 209.594013][ T9590] genl_rcv+0x24/0x40 [ 209.597999][ T9590] netlink_unicast+0x786/0x940 [ 209.602860][ T9590] netlink_sendmsg+0xa57/0xd70 [ 209.607826][ T9590] ? netlink_getsockopt+0x9e0/0x9e0 [ 209.613030][ T9590] ____sys_sendmsg+0x519/0x800 [ 209.617803][ T9590] ? import_iovec+0x12a/0x2c0 [ 209.622484][ T9590] __sys_sendmsg+0x2b1/0x360 [ 209.627163][ T9590] ? kvm_sched_clock_read+0x15/0x40 [ 209.632363][ T9590] ? debug_smp_processor_id+0x5/0x20 [ 209.637836][ T9590] ? check_preemption_disabled+0xb0/0x240 [ 209.643558][ T9590] ? debug_smp_processor_id+0x5/0x20 20:30:22 executing program 5: chdir(&(0x7f0000000240)='./file0\x00') socket$kcm(0x10, 0x2, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x48280) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x34}], 0x1}, 0x80) syz_genetlink_get_family_id$smc(&(0x7f00000001c0)='SMC_PNETID\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)}, {0x0}], 0x2, &(0x7f0000000580)}, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r2, 0xb01, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x6c}, 0x0) [ 209.649119][ T9590] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 209.655361][ T9590] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 209.661779][ T9590] ? trace_hardirqs_on+0x30/0x80 [ 209.666813][ T9590] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 209.672880][ T9590] do_syscall_64+0x73/0xe0 [ 209.677300][ T9590] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 209.683188][ T9590] RIP: 0033:0x45cb19 [ 209.687092][ T9590] Code: Bad RIP value. [ 209.691158][ T9590] RSP: 002b:00007f0614946c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.699574][ T9590] RAX: ffffffffffffffda RBX: 00000000005021c0 RCX: 000000000045cb19 [ 209.707633][ T9590] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000007 [ 209.716103][ T9590] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 209.724289][ T9590] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 209.732650][ T9590] R13: 0000000000000a2f R14: 00000000004cd159 R15: 00007f06149476d4 [ 209.742213][ T9590] Kernel Offset: disabled [ 209.746569][ T9590] Rebooting in 86400 seconds..